xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:33:20 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(0x0, 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(r1, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:33:20 executing program 2: ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r2, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) sendmsg$sock(r2, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(0xffffffffffffffff, 0x5425, 0x0) 07:33:21 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(r1, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:33:22 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000080)) open_tree(r0, &(0x7f0000000280)='./file0\x00', 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(0xffffffffffffffff, 0x101000) 07:33:22 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:33:22 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(r1, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:33:23 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, &(0x7f0000000280)='./file0\x00', 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:33:23 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(r1, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:33:23 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:33:24 executing program 2: ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r2, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) sendmsg$sock(r2, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(0xffffffffffffffff, 0x5425, 0x0) 07:33:24 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:33:25 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:33:26 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(r1, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:33:26 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, &(0x7f0000000280)='./file0\x00', 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:33:26 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(r1, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:33:27 executing program 2: ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r2, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) sendmsg$sock(r2, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(0xffffffffffffffff, 0x5425, 0x0) 07:33:28 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:33:28 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:33:29 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r2 = open_tree(r1, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:33:29 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, &(0x7f0000000280)='./file0\x00', 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:33:29 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(r1, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:33:30 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:33:30 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r2 = open_tree(r1, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:33:31 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:33:31 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r2 = open_tree(r1, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:33:31 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:33:32 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, &(0x7f0000000280)='./file0\x00', 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:33:32 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(r1, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:33:33 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:33:34 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:33:34 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, 0x0) r2 = open_tree(r1, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:33:35 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:33:35 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(0x0, 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, &(0x7f0000000280)='./file0\x00', 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:33:36 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(r1, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:33:36 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:33:37 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:33:38 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, 0x0) r2 = open_tree(r1, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:33:38 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(0xffffffffffffffff, 0x101000) dup(r0) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(0xffffffffffffffff, 0x5425, 0x0) 07:33:38 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(0x0, 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, &(0x7f0000000280)='./file0\x00', 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:33:39 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(r1, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:33:39 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:33:39 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(0x0, 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, &(0x7f0000000280)='./file0\x00', 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:33:40 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:33:41 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, 0x0) r2 = open_tree(r1, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:33:41 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(0xffffffffffffffff, 0x101000) dup(r0) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(0xffffffffffffffff, 0x5425, 0x0) 07:33:42 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r2 = open_tree(r1, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:33:42 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:33:43 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, &(0x7f0000000280)='./file0\x00', 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:33:43 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:33:44 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:33:44 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(0xffffffffffffffff, 0x101000) dup(r0) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(0xffffffffffffffff, 0x5425, 0x0) 07:33:45 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:33:45 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r2 = open_tree(r1, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:33:45 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:33:46 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, &(0x7f0000000280)='./file0\x00', 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:33:47 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:33:47 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:33:48 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:33:48 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r2 = open_tree(r1, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:33:48 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:33:49 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:33:49 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:33:49 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, &(0x7f0000000280)='./file0\x00', 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:33:50 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:33:51 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, 0x0) r2 = open_tree(r1, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:33:52 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:33:52 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:33:52 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:33:52 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, &(0x7f0000000280)='./file0\x00', 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:33:53 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:33:54 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:33:54 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:33:54 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, 0x0) r2 = open_tree(r1, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:33:55 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:33:55 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:33:55 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:33:55 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(r1, &(0x7f0000000280)='./file0\x00', 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:33:56 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:33:57 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:33:57 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:33:57 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, 0x0) r2 = open_tree(r1, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:33:58 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:33:58 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:33:59 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(r1, &(0x7f0000000280)='./file0\x00', 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:34:00 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(r1, &(0x7f0000000280)='./file0\x00', 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:34:00 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(0x0, 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:00 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:01 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:34:01 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:34:01 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:03 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, 0x0) open_tree(r1, &(0x7f0000000280)='./file0\x00', 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:34:03 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(0x0, 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:03 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:04 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:34:04 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:34:04 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) [ 501.443864][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.451483][ T1233] ieee802154 phy1 wpan1: encryption failed: -22 07:34:06 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:34:06 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, 0x0) open_tree(r1, &(0x7f0000000280)='./file0\x00', 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:34:06 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(0x0, 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:07 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:07 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:34:07 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:09 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:34:09 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, 0x0) open_tree(r1, &(0x7f0000000280)='./file0\x00', 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:34:10 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:10 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:10 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:34:10 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:12 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:34:12 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:34:13 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:13 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:13 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(r1, 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:34:14 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:15 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:34:16 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:34:16 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:16 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(r1, 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:34:16 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:17 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:18 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:34:19 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:34:19 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:19 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(r1, 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:34:19 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:20 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:20 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:21 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:21 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:34:22 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:34:22 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:34:23 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:24 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:24 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:25 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:34:25 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:34:25 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:34:26 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:27 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:27 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:28 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:34:28 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:34:28 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:34:29 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:30 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:30 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:31 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:34:31 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:34:32 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:34:32 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:33 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:33 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:34 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:34:34 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:34:35 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:34:35 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:36 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:36 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:37 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:34:37 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:34:38 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:34:38 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:39 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:39 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:40 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:34:40 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:34:41 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:34:41 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:42 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:42 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:43 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:34:43 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:34:44 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:34:44 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:45 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:45 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:46 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:34:46 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:34:47 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:34:47 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:48 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:48 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:49 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:34:49 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:34:50 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:34:50 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:51 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:51 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:52 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:34:52 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:34:53 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:34:53 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:54 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:54 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r2) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:55 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:34:55 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:34:56 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:34:57 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:57 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:57 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r2) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:34:58 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:34:58 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:34:59 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:35:00 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:00 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:01 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r2) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:01 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:35:02 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:35:02 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:35:03 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:03 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x0, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:04 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:04 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:35:05 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:35:05 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:35:06 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:06 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x0, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:07 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) [ 562.881998][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.888336][ T1233] ieee802154 phy1 wpan1: encryption failed: -22 07:35:07 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:35:08 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:35:08 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:35:09 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:09 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x0, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:10 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:10 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:35:11 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:35:12 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:35:12 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:12 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:13 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:13 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:13 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:13 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:13 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:13 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:13 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:13 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:35:14 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:35:15 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:35:15 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:16 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:16 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:17 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:35:17 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:35:18 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:35:18 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:19 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:19 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:20 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:35:20 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:35:21 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:35:21 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:22 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:22 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:23 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:35:23 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:35:24 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:35:24 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x0, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:25 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:25 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:26 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:35:26 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:35:27 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:35:27 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x0, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:28 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:28 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:29 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:35:29 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:35:30 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:35:30 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x0, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:31 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) dup(r2) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:31 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:32 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:35:32 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:35:33 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:35:33 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:34 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) dup(r2) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:34 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:35 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:35:35 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:35:36 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:35:36 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:37 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) dup(r2) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:37 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:37 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:37 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:37 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, 0x0, 0x0, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:37 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, 0x0, 0x0, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:38 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, 0x0, 0x0, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:38 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440), 0x0, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:38 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:35:38 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440), 0x0, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:39 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:35:39 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:35:40 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:40 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440), 0x0, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:40 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:40 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:41 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:41 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:35:42 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:42 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:35:42 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:35:43 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:43 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r2, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r2, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:43 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:44 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x0, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:35:45 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:35:45 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:35:46 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:46 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:46 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r2, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r2, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:47 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x0, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:35:48 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x0, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:35:48 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:35:49 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:49 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:49 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r2, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r2, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:50 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x0, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:35:51 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x0, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:35:51 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:35:52 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:52 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) dup(r1) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r2, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r2, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:52 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:53 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:35:54 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x0, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:35:54 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:35:55 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:55 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) dup(r1) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r2, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r2, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:55 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:56 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:35:57 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:35:57 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:35:58 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:58 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) dup(r1) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r2, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r2, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:58 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:35:59 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:36:00 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:36:00 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:36:01 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, 0x0}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:01 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:01 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:02 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:36:03 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:36:03 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x0, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:36:04 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, 0x0}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:04 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:04 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:05 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:36:06 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:36:06 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x0, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:36:07 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, 0x0}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:07 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:07 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:08 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:08 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) [ 624.322196][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.329835][ T1233] ieee802154 phy1 wpan1: encryption failed: -22 07:36:08 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:09 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:09 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:09 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:36:10 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x0, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:36:10 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:10 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:10 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:11 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:11 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:11 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) dup(r4) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:36:12 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:12 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:36:13 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:36:13 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:13 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:13 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:14 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:14 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:15 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) dup(r4) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:36:15 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:16 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:36:16 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:36:16 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:16 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:17 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:17 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:17 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, 0x0, 0x0, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:18 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) dup(r4) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:36:18 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, 0x0, 0x0, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:19 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:36:19 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:36:19 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, 0x0, 0x0, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:19 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x0, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:19 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440), 0x0, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:20 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440), 0x0, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:20 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, 0x0, 0x0) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:21 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440), 0x0, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:21 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:36:22 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:22 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:36:22 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:36:22 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x0, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:22 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:23 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, 0x0, 0x0) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:23 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:24 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:36:24 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:25 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:36:25 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:36:25 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x0, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:26 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, 0x0, 0x0) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:27 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:36:27 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:28 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:36:28 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:36:28 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x0, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:29 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0), 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:30 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:36:30 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:31 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:36:31 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:36:31 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x0, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:32 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0), 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:33 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:36:33 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, 0x0) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:34 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:36:34 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:36:34 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x0, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:35 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0), 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:36 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:36:36 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, 0x0) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:37 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:36:37 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:36:37 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x0, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:38 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:39 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:39 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:39 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:36:39 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, 0x0) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:40 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, 0x0, 0x0, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:40 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:36:40 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:36:40 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x0, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:41 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:36:41 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:36:41 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, 0x0, 0x0, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:41 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:36:42 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:36:42 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:36:42 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:36:43 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, 0x0, 0x0, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:43 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:36:43 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:36:43 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={0x0}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:44 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x0, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:44 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440), 0x0, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:45 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440), 0x0, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:45 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:36:45 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440), 0x0, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:46 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:36:46 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={0x0}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:46 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:46 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:36:47 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:48 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:49 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:36:49 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:36:49 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:49 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:36:50 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={0x0}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:50 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:36:50 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:50 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:50 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:36:51 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:36:51 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:36:52 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, 0x0, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:36:52 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:36:52 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:36:53 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:53 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:36:53 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:53 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:53 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:36:54 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:36:54 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:36:55 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, 0x0, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:36:55 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:36:56 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:36:56 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:56 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:56 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:57 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:36:57 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:36:58 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, 0x0, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:36:59 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:59 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:36:59 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:00 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:37:01 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:37:01 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0), 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:37:02 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x0) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:02 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:02 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:03 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:37:04 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, 0x0, 0x0) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:37:04 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0), 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:37:05 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x0) sendmsg$sock(r3, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:05 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x0, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:05 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:06 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, 0x0, 0x0) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:37:07 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, 0x0, 0x0) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:37:07 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0), 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:37:08 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:08 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x0, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:09 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x0, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:09 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, 0x0, 0x0) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:37:10 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, 0x0, 0x0) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) [ 685.771846][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.778273][ T1233] ieee802154 phy1 wpan1: encryption failed: -22 07:37:10 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:37:10 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:37:10 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:37:10 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, 0x0, 0x0, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:37:10 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, 0x0, 0x0, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:37:10 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, 0x0, 0x0, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:37:10 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440), 0x0, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:37:11 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:11 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x0, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:12 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x0, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:12 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, 0x0, 0x0) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:37:13 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0), 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:37:13 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440), 0x0, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:37:13 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440), 0x0, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:37:13 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:37:14 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:37:14 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:14 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, 0x0) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:15 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x0, 0x0, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:15 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:37:15 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0), 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:37:16 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r2, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:37:16 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0), 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:37:17 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:17 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, 0x0) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:18 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x0, 0x0, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:18 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0), 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:37:19 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r2, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:37:19 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0), 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:37:20 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:20 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, 0x0) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:21 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x0, 0x0, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:21 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0), 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:37:22 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r2, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:37:22 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:37:23 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:37:23 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:37:23 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:23 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={0x0}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:24 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x0, 0x649, {0x0}, {0xee01}, 0x0, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:24 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, 0x0, 0x0, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:37:24 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:37:25 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r2, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:37:25 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, 0x0, 0x0, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:37:25 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:37:26 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, 0x0, 0x0, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:37:26 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:37:26 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:26 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={0x0}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:27 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440), 0x0, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:37:27 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x0, 0x649, {0x0}, {0xee01}, 0x0, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:27 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, 0x0, 0x0, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:37:28 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440), 0x0, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:37:28 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r2, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:37:28 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, 0x0, 0x0, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:37:28 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x0, 0x649, {0x0}, {0xee01}, 0x0, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:29 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440), 0x0, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:37:29 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, 0x0, 0x0, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:37:30 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={0x0}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:30 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:30 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440), 0x0, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:37:30 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:37:31 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440), 0x0, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:37:31 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r2, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:37:31 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:37:32 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x0, 0x649, {0x0}, {0xee01}, 0x66a}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:32 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440), 0x0, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:37:32 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:37:33 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(0xffffffffffffffff, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:33 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:33 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:37:34 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 07:37:34 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:37:34 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r2, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:37:35 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x0, 0x649, {0x0}, {0xee01}, 0x66a}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:35 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:37:36 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(0xffffffffffffffff, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:36 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:36 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) syz_open_pts(r0, 0x101000) 07:37:37 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 07:37:37 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r2, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:37:38 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x0, 0x649, {0x0}, {0xee01}, 0x66a}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:39 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(0xffffffffffffffff, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:39 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:39 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) syz_open_pts(r0, 0x101000) 07:37:40 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 07:37:41 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r2, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:37:41 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x0, 0x649, {}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:42 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x0) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:42 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:42 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) syz_open_pts(r0, 0x101000) 07:37:43 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:37:44 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r2, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) syz_open_pts(r0, 0x101000) dup(r1) 07:37:44 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x0, 0x649, {}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:45 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x0) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:45 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:45 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(r0, 0x101000) 07:37:46 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:37:47 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000080)) open_tree(r0, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r1, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) syz_open_pts(0xffffffffffffffff, 0x101000) dup(r0) 07:37:47 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x0, 0x649, {}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:48 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x0) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:48 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:48 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) syz_open_pts(r0, 0x101000) 07:37:49 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:37:50 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000080)) open_tree(r0, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r1, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) syz_open_pts(0xffffffffffffffff, 0x101000) dup(r0) 07:37:50 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x0, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x0, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:51 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:51 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:51 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) syz_open_pts(r0, 0x101000) 07:37:52 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, 0x0}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:37:53 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000080)) open_tree(r0, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r1, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) syz_open_pts(0xffffffffffffffff, 0x101000) dup(r0) 07:37:53 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x0, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x0, 0x0) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:54 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:54 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:54 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) open_tree(r1, 0x0, 0x81900) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) syz_open_pts(r0, 0x101000) 07:37:55 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, 0x0}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:37:56 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000080)) open_tree(r0, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r1, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) dup(r0) 07:37:56 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x0, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x0, 0x0) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:57 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:57 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:37:57 executing program 5: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000080)) open_tree(r0, 0x0, 0x81900) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(0xffffffffffffffff, 0x101000) 07:37:58 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, 0x0}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x2) 07:37:59 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000080)) open_tree(r0, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r1, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) dup(r0) 07:37:59 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x0, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x0, 0x0) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:38:00 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x0) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:38:00 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:38:01 executing program 5: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000080)) open_tree(r0, 0x0, 0x81900) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(0xffffffffffffffff, 0x0) 07:38:01 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000080)) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r1, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 07:38:02 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000080)) open_tree(r0, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r1, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) dup(r0) 07:38:02 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x0, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x0, &(0x7f0000000740)={0x0}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:38:03 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x0) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:38:03 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:38:04 executing program 5: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000080)) open_tree(r0, 0x0, 0x81900) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000100)=@tcp}, 0x20) syz_open_pts(0xffffffffffffffff, 0x0) 07:38:04 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000080)) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r1, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 07:38:05 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000080)) open_tree(r0, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r1, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) syz_open_pts(0xffffffffffffffff, 0x101000) dup(0xffffffffffffffff) 07:38:05 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x0, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x0, &(0x7f0000000740)={0x0}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:38:06 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x0) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:38:06 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:38:07 executing program 5: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000100)=0x4e0, 0x4) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) 07:38:07 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@private0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in=@loopback}, 0x0, @in=@dev}}, 0xe4) 07:38:07 executing program 5: process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x13241000, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), 0x0) 07:38:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000500)={&(0x7f0000000200), 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0xbc, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x84, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}, @NLBL_CIPSOV4_A_DOI={0xa8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0xbc}}, 0x0) 07:38:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x101, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0) [ 742.948629][T10147] nbd: must specify a device to reconfigure [ 742.963601][T10147] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 07:38:07 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback={0xffffff7f00000000}}, 0x1c) 07:38:07 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r0, &(0x7f0000000200)=0x0, &(0x7f0000000240)) 07:38:08 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000080)) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r1, 0xc0404309, &(0x7f00000002c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 07:38:08 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000080)) open_tree(r0, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r1, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) syz_open_pts(0xffffffffffffffff, 0x101000) dup(0xffffffffffffffff) 07:38:08 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x0, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x0, &(0x7f0000000740)={0x0}) syz_open_pts(r0, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:38:09 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:38:09 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x5425, 0x0) 07:38:09 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x9, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f0000000080)={0x2, @pix_mp}) 07:38:09 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0x8, 0x1, 0x0, "302a4803e65d50dd35f8770693b4b24aaf0ea5ee62c744abab2e51c2b18093a4"}) [ 745.490349][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 745.490365][ T26] audit: type=1400 audit(1691480289.930:295): avc: denied { ioctl } for pid=10168 comm="syz-executor.5" path="/dev/video9" dev="devtmpfs" ino=872 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 07:38:10 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 07:38:10 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001100)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in=@multicast2, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in=@empty}]}, 0x3c}}, 0x0) [ 745.622425][ T26] audit: type=1400 audit(1691480290.070:296): avc: denied { connect } for pid=10174 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 07:38:10 executing program 5: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) timerfd_gettime(r0, 0x0) [ 745.683725][ T26] audit: type=1400 audit(1691480290.130:297): avc: denied { write } for pid=10176 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 07:38:10 executing program 5: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x84, 0x82, 0x0, 0x0) 07:38:10 executing program 5: syz_emit_ethernet(0x22, &(0x7f00000003c0)={@local, @dev, @val={@void}, {@generic={0x88ca, "2b495e262111f44b69c709b9f5624b3b"}}}, 0x0) [ 745.751536][ T26] audit: type=1400 audit(1691480290.130:298): avc: denied { nlmsg_read } for pid=10176 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 07:38:11 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x0) 07:38:11 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x46100) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000080)) open_tree(r0, 0x0, 0x81900) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r1, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) syz_open_pts(0xffffffffffffffff, 0x101000) dup(0xffffffffffffffff) [ 747.211707][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.218054][ T1233] ieee802154 phy1 wpan1: encryption failed: -22 07:38:11 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x0, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x0, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(0xffffffffffffffff, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:38:12 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:38:12 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x5425, 0x0) 07:38:12 executing program 5: r0 = syz_io_uring_setup(0x3649, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x541b, 0x0) 07:38:13 executing program 5: syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "6186b4", 0x1c, 0x21, 0x0, @remote, @local, {[@routing], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 748.538056][ T26] audit: type=1400 audit(1691480292.980:299): avc: denied { getattr } for pid=10196 comm="syz-executor.5" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=47731 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 07:38:13 executing program 5: r0 = openat$vmci(0xffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, 0x0) [ 748.598751][T10201] dccp_invalid_packet: P.Data Offset(0) too small 07:38:13 executing program 5: syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x410400) 07:38:13 executing program 5: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x541b, 0x0) 07:38:13 executing program 5: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$phonet(r0, &(0x7f0000000040), 0x10) [ 748.731953][ T26] audit: type=1400 audit(1691480293.180:300): avc: denied { create } for pid=10207 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 07:38:13 executing program 5: ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001040)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000001100)) [ 748.811545][ T26] audit: type=1400 audit(1691480293.260:301): avc: denied { bind } for pid=10209 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 07:38:14 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x0) 07:38:14 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000001c40), 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x40046602, 0x0) 07:38:14 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x0, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x0, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(0xffffffffffffffff, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:38:15 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:38:15 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x5}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x5425, 0x0) 07:38:15 executing program 4: capget(&(0x7f0000000040)={0x20080522, 0xffffffffffffffff}, 0x0) 07:38:15 executing program 5: connect$caif(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ocfs2_control(0xffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0, r0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f00000001c0)={&(0x7f0000001580)={{@hyper, 0x1}, {@local}, 0x400, "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"}, 0x418}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000240)={r1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f0000001340)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000280)) r2 = openat$loop_ctrl(0xffffff9c, &(0x7f0000001300), 0x100200, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_open_dev$vcsu(&(0x7f00000013c0), 0x688, 0x10001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001500)) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) openat$ocfs2_control(0xffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 07:38:16 executing program 4: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0x32, 0x0, 0x0) [ 751.588543][ T26] audit: type=1400 audit(1691480296.030:302): avc: denied { read write } for pid=10225 comm="syz-executor.5" name="loop-control" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 07:38:16 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000180)={'IDLETIMER\x00'}, &(0x7f00000001c0)=0x1e) 07:38:16 executing program 4: syz_clone3(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x7f) [ 751.662580][ T26] audit: type=1400 audit(1691480296.030:303): avc: denied { open } for pid=10225 comm="syz-executor.5" path="/dev/loop-control" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 07:38:16 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000180)={'IDLETIMER\x00'}, &(0x7f00000001c0)=0x1e) [ 751.725759][ T26] audit: type=1400 audit(1691480296.030:304): avc: denied { ioctl } for pid=10225 comm="syz-executor.5" path="/dev/loop-control" dev="devtmpfs" ino=647 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 07:38:16 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000040)={@random="0bc0550b8d15", @remote, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "bead32", 0x44, 0x2f, 0x0, @remote, @private0, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}}}}}}, 0x0) [ 751.848654][ T26] audit: type=1400 audit(1691480296.210:305): avc: denied { getopt } for pid=10234 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 07:38:17 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x81900) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x30000, 0x0, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000), &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$TCXONC(r0, 0x540a, 0x0) 07:38:17 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x5, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x3}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x31}, 0x20) 07:38:17 executing program 4: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private0}, r1}}, 0x30) 07:38:18 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, 0x0, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:38:19 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x0, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x0, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(0xffffffffffffffff, 0x101000) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:38:19 executing program 5: r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc004ae02, 0x0) 07:38:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8919, &(0x7f0000000180)={'tunl0\x00', 0x0}) 07:38:19 executing program 2: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x30) 07:38:19 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000001c40), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x2}) 07:38:19 executing program 4: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x74}, 0x20) 07:38:19 executing program 2: syz_emit_ethernet(0xa2, &(0x7f00000002c0)={@random="d1c1d46f08f6", @random="a7194e688b42", @void, {@ipv4={0x800, @tcp={{0x20, 0x4, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x6, 0x0, @broadcast, @broadcast, {[@end, @lsrr={0x83, 0x27, 0x0, [@broadcast, @loopback, @dev, @remote, @loopback, @broadcast, @empty, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x0, 0xb, "20ed9ead48697f98cb"}, @ssrr={0x89, 0x1b, 0x0, [@dev, @loopback, @private, @broadcast, @multicast1, @multicast2]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @ssrr={0x89, 0x13, 0x0, [@broadcast, @broadcast, @rand_addr, @local]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 07:38:19 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8922, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) [ 754.843164][T10270] ip6tnl0: mtu less than device minimum 07:38:20 executing program 5: bpf$BPF_BTF_LOAD(0x10, &(0x7f0000000180)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) 07:38:20 executing program 2: r0 = openat$sw_sync(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) 07:38:20 executing program 4: syz_clone(0x40000000, 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001400)) 07:38:21 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, 0x0, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:38:22 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x0, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x0, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x0) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:38:22 executing program 1: r0 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r0, 0x0, 0x0) 07:38:22 executing program 2: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000040)) 07:38:22 executing program 5: r0 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5452, &(0x7f0000000180)={'erspan0\x00', 0x0}) 07:38:22 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000380)=@framed={{}, [], {0x95, 0x0, 0x0, 0x7300}}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 07:38:22 executing program 4: syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x486, 0x186, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) 07:38:22 executing program 5: socket(0xa, 0x0, 0xfffffff7) 07:38:22 executing program 2: r0 = gettid() ptrace$getregset(0x4204, r0, 0x0, 0x0) 07:38:22 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000100), 0x4) 07:38:22 executing program 5: syz_io_uring_setup(0xf0b, &(0x7f0000000580), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 07:38:22 executing program 2: r0 = gettid() capset(&(0x7f0000000080)={0x20080522, r0}, &(0x7f00000000c0)) [ 758.070826][ T5104] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 758.430764][ T5104] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 758.600809][ T5104] usb 5-1: New USB device found, idVendor=0486, idProduct=0186, bcdDevice= 0.40 [ 758.610471][ T5104] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.619206][ T5104] usb 5-1: Product: syz [ 758.623669][ T5104] usb 5-1: Manufacturer: syz [ 758.628260][ T5104] usb 5-1: SerialNumber: syz [ 758.676156][ T5104] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 758.880415][ T5107] usb 5-1: USB disconnect, device number 2 07:38:24 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, 0x0, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:38:25 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x0, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x0, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x0) dup(r1) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:38:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty, {[@timestamp_prespec={0x44, 0x4}]}}}}}) 07:38:25 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x0, [], 0x2}}, 0x0, 0x1a}, 0x20) 07:38:25 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x891e, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) 07:38:25 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) 07:38:25 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002200)={'vxcan0\x00', 0x0}) connect$can_j1939(r0, &(0x7f0000000000)={0x1d, r2}, 0x18) 07:38:25 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1-avx2)\x00'}, 0x58) 07:38:25 executing program 1: r0 = openat$rtc(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7003) 07:38:25 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x5451, 0x0) 07:38:25 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) [ 760.940788][ T26] audit: type=1400 audit(1691480305.380:306): avc: denied { ioctl } for pid=10321 comm="syz-executor.5" path="socket:[48658]" dev="sockfs" ino=48658 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 07:38:25 executing program 1: openat$nci(0xffffff9c, &(0x7f0000001540), 0x63, 0x0) [ 761.094896][ T26] audit: type=1400 audit(1691480305.410:307): avc: denied { connect } for pid=10321 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 07:38:27 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:38:28 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x0, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x0, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x0) dup(0xffffffffffffffff) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:38:28 executing program 5: r0 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x2}, 0x10) 07:38:28 executing program 2: r0 = openat$binderfs(0xffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x44, 0x0, &(0x7f0000000500)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 07:38:28 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000001c40), 0x0, 0x2) openat$vim2m(0xffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0cc5604, 0x0) openat$vim2m(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000440)={0x8, 0x1, 0x1, 0x0, 0x8}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x0, 0x2}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) 07:38:28 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$tun(r0, &(0x7f0000000000)={@void, @void, @ipv6=@generic={0x0, 0x6, "5c7ea7", 0x0, 0x0, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x28) write$tun(r0, &(0x7f0000000640)={@val, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "7fbc8a", 0xfcb, 0x11, 0x0, @mcast1, @private1, {[], {0x0, 0x0, 0xfcb, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "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"}}}}}}, 0x1001) 07:38:28 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xb, 0x0, &(0x7f0000000040)) 07:38:28 executing program 5: r0 = openat$qrtrtun(0xffffff9c, &(0x7f0000000140), 0x88800) read$qrtrtun(r0, 0x0, 0x0) [ 763.886328][ T26] audit: type=1400 audit(1691480308.330:308): avc: denied { create } for pid=10341 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 763.915109][ T26] audit: type=1400 audit(1691480308.360:309): avc: denied { write } for pid=10341 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 07:38:28 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x2c00, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback={0xffffffffff600000}}, 0x1c) 07:38:28 executing program 5: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:38:28 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r0, 0x402c5828, &(0x7f00000000c0)={@mcast2, @mcast2, @dev}) 07:38:28 executing program 4: semctl$GETZCNT(0xffffffffffffffff, 0x0, 0xf, 0x0) 07:38:31 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:38:31 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x0, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x0, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x0) dup(0xffffffffffffffff) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:38:31 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0x4, 0x0, &(0x7f0000000040)) 07:38:31 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000100)=0x1ff, 0x4) 07:38:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 07:38:31 executing program 1: add_key(&(0x7f0000000140)='pkcs7_test\x00', 0x0, &(0x7f0000000340)="108e", 0x2, 0xfffffffffffffffc) 07:38:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89b0, &(0x7f0000000080)={'sit0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 07:38:31 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000240)={'ah\x00'}, &(0x7f0000000280)=0x1e) [ 766.989259][ T26] audit: type=1400 audit(1691480311.430:310): avc: denied { write } for pid=10370 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 07:38:31 executing program 5: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x84, 0x64, 0x0, 0x0) 07:38:31 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "6186b4", 0x14, 0x3b, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 07:38:31 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x2}]}}, 0x0, 0x26}, 0x20) 07:38:31 executing program 5: r0 = openat$sndseq(0xffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000280)) 07:38:34 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:38:34 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x2, 0x0, 0x0) 07:38:34 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x18, &(0x7f0000000100)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in=@dev}, 0x0, @in=@loopback}}, 0xe4) 07:38:34 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@private0, @loopback, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}) 07:38:34 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x0, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x0, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x0) dup(0xffffffffffffffff) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:38:34 executing program 4: syz_clone3(&(0x7f00000026c0)={0x12020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002680)=[0x0], 0x1}, 0x58) 07:38:34 executing program 5: r0 = openat$rtc(0xffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x4004700e) 07:38:34 executing program 2: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000500)={0x13, 0xfffffffffffffe0d, 0xfa00, {0x0}}, 0x18) 07:38:34 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x43, &(0x7f0000000000)="bfe8d067", 0x4) 07:38:34 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x84, 0x78, 0x0, 0x0) 07:38:34 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000001c40), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000440)={0x8, 0x1, 0x1}) 07:38:34 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 07:38:37 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:38:37 executing program 5: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0x7, 0x0, 0x0) 07:38:37 executing program 1: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000002c0)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "60d72b40dc3b17c26615535d62c5e334a64514dd7130c268ecb83004bb9fb69239087bb063cf558b66e31e56b8ba73dcfeb4a07107dae2076d36b7124ee4dad20de036741f99406065098fa00be20733d4891056d88fb48fb7bf8e76a096bc8336919398f7f688adfec7017052b477c2adbce386cba23b2caed9b76aa32f6739e716cccf103f73fb021b3ab5a6b8e1a0b6fd588152ad10e43004ea564144866366c605cfc14e4be1f47b1b2327c08c868a482665dfac99a43b2b63f51104a03cc1e9e99b4a5f8c155e2c789613eda5b05c4b258cea4204c9e12edebe26298e23e66fd81b69bb6d514c81c018e4b76277746e99b7332947d4d3bc1cad4faafb31"}}}, 0x128) 07:38:37 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000380)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4f, 0x10, 0x0}, 0x80) 07:38:37 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x0, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x0, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x0) dup(0xffffffffffffffff) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:38:37 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x1c, &(0x7f0000000100)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in=@dev}, 0x0, @in=@loopback}}, 0xe4) 07:38:37 executing program 4: syz_clone(0x48020000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 07:38:37 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc4}, &(0x7f0000000300)={0x0, "86aca90354715fb207bddda805a56d55bedacfc72b9075bb908840f6294293c5b1cf76545126e5cffa5923dfec3bfe13d40d79d2721b0ee3b4513129d9f38da4"}, 0x48, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0) 07:38:37 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0xe}]}}, 0x0, 0x26}, 0x20) 07:38:37 executing program 5: r0 = openat$binderfs(0xffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 07:38:37 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)="64758d4ae7f069945031923450ded3b91f5f09056e342e3467dc3ba7881887d54996ea828663a1cb683409390c300e6cd34644ab63ee43945dd1c68c7acbcafa01c77b42fc108f684acb28e2fe9d5fe7921f48c30c9434f7db66f7f9e57fe03989adf9984911f093505beb7e5fd642d4d792c3be5c4307eb6e3dde8ad540b38c96090283ab0ec380c1cbac3d", 0x8c) 07:38:37 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000001c40), 0x0, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0cc5604, &(0x7f0000000580)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) [ 773.322487][T10452] binder: 10450:10452 ioctl c0306201 0 returned -14 07:38:40 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:38:40 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x541b, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) 07:38:40 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 07:38:40 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cubic\x00', 0x6) [ 775.732055][ T26] audit: type=1400 audit(1691480320.180:311): avc: denied { getopt } for pid=10460 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 07:38:40 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8910, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) 07:38:40 executing program 4: r0 = openat$binderfs(0xffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) 07:38:40 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)={0x6, {{0xa, 0x0, 0x0, @mcast1}}}, 0x8c) 07:38:40 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x0, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x0, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x0) dup(0xffffffffffffffff) sendmsg$sock(r4, 0x0, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:38:40 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x6e6bb3}, {{@in6=@dev}, 0x0, @in6=@local}}, 0xe4) 07:38:40 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0x0, 0x0, 0x4}, 0x48) 07:38:40 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) [ 776.296812][T10469] binder: 10466:10469 ioctl c018620c 20000400 returned -22 07:38:40 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000240)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00') 07:38:43 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:38:43 executing program 4: open$dir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 07:38:43 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000100)={0x1c, 0x1c}, 0x1c) 07:38:43 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000140)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000080), &(0x7f0000000000)=0x98) 07:38:43 executing program 5: add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @auto=[0x62, 0x38, 0x64, 0x39, 0x41, 0x35, 0x63, 0x66]}, &(0x7f0000000140)={0x0, "5ae609ac63d011605358379da7cd381ce0c7fe7884b6620e791a56d5c3612edc815ed47bb056da3d2950adfe542899e6f7e092a28d1b70f46ea0393a86f94640"}, 0x48, 0xfffffffffffffffc) 07:38:43 executing program 5: r0 = gettid() kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) [ 778.805537][ T26] audit: type=1400 audit(1691480323.250:312): avc: denied { connect } for pid=10486 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 07:38:43 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x0, 0xffffffffffffffff) 07:38:43 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x0, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x0, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x0) dup(0xffffffffffffffff) sendmsg$sock(r4, 0x0, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:38:43 executing program 4: syz_io_uring_setup(0xefe, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0) r0 = syz_io_uring_setup(0xe80, &(0x7f00000003c0), &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_FALLOCATE) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x3c00, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0) syz_io_uring_setup(0x49a1, &(0x7f0000000280), &(0x7f0000000300)=0x0, &(0x7f0000000340)) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}) r4 = syz_io_uring_setup(0x7f4, &(0x7f0000000080), &(0x7f0000ffe000), &(0x7f0000ffd000)) io_uring_enter(r4, 0x0, 0xe27, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x5db5, 0x0, 0x0, 0x0, 0x0) 07:38:43 executing program 2: symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) 07:38:43 executing program 5: open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x100000004e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "6814e35f9681f1fb", "43b4c1787a45ddffb6bfe8d0e8aa08a5", "d700", "ffecfd6e889a17e7"}, 0x28) r4 = creat(&(0x7f0000000380)='./bus\x00', 0x0) ftruncate(r4, 0x208200) sendfile(r3, r1, 0x0, 0x800100020013) 07:38:43 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7ff, 0x4, 0x6, 0x6, 0x1}) syz_open_dev$vcsu(&(0x7f0000000140), 0x8, 0x10000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x48010}, 0x0) [ 779.399755][ T26] audit: type=1804 audit(1691480323.840:313): pid=10505 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir4286043555/syzkaller.7dJzFf/315/bus" dev="sda1" ino=1963 res=1 errno=0 [ 779.427430][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 779.456457][T10509] Zero length message leads to an empty skb [ 779.473689][ T26] audit: type=1400 audit(1691480323.920:314): avc: denied { rename } for pid=4452 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 779.559266][ T26] audit: type=1400 audit(1691480323.920:315): avc: denied { unlink } for pid=4452 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 779.649306][ T26] audit: type=1400 audit(1691480323.920:316): avc: denied { create } for pid=4452 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 779.671604][ T26] audit: type=1804 audit(1691480323.940:317): pid=10512 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir4286043555/syzkaller.7dJzFf/315/bus" dev="sda1" ino=1963 res=1 errno=0 07:38:46 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:38:46 executing program 2: syz_clone(0x6001300, 0x0, 0x0, 0x0, 0x0, 0x0) 07:38:46 executing program 1: pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), 0x0, &(0x7f0000000180), 0x0) 07:38:46 executing program 5: r0 = fsopen(&(0x7f0000000400)='v7\x00', 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000440)='-[\x00', &(0x7f0000000480)='./file0\x00', r1) 07:38:46 executing program 4: syz_open_dev$vcsu(&(0x7f0000000440), 0x3f, 0x2300) 07:38:46 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x8, 0xc3d9, 0xa4}, 0x48) 07:38:46 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x0, 0x4}) 07:38:46 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x0, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x0, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x0) dup(0xffffffffffffffff) sendmsg$sock(r4, 0x0, 0x0) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:38:46 executing program 1: syz_open_dev$loop(&(0x7f00000000c0), 0xffffffffffffffe1, 0x40) 07:38:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0xc915, &(0x7f0000000080)={[{@nobarrier}, {@noblock_validity}, {@lazytime}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@errors_remount}, {@resgid={'resgid', 0x3d, 0xee01}}, {@errors_remount}, {@resgid={'resgid', 0x3d, 0xee01}}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x1e, 0x4d3, &(0x7f0000000540)="$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") 07:38:46 executing program 4: r0 = fsopen(&(0x7f0000000400)='v7\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000440)='-[\x00', 0x0, 0xffffffffffffffff) 07:38:46 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000000008100000086dd600100ea00382c"], 0x72) [ 782.563232][T10543] loop2: detected capacity change from 0 to 512 [ 782.600407][T10543] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 782.612913][T10543] EXT4-fs (loop2): bad geometry: first data block is 0 with a 1k block and cluster size 07:38:49 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$evdev(0xffffffffffffffff, &(0x7f0000000340)=[{{}, 0x4}], 0x18) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2778) 07:38:49 executing program 1: syz_genetlink_get_family_id$team(&(0x7f0000000e80), 0xffffffffffffffff) 07:38:49 executing program 2: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x1000011, &(0x7f0000000100)={[{@check_relaxed}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}]}, 0x1, 0x95e, &(0x7f0000000140)="$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") open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) 07:38:49 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:38:49 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4142112, r0, 0x0) 07:38:49 executing program 5: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_GET_ERRCODE(r0, 0x5460, 0x0) 07:38:49 executing program 4: syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f0000005600)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r1}) [ 784.986094][ T26] audit: type=1400 audit(1691480329.430:318): avc: denied { write } for pid=10558 comm="syz-executor.4" name="event0" dev="devtmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 785.000046][T10555] loop2: detected capacity change from 0 to 1764 [ 785.087458][ T26] audit: type=1400 audit(1691480329.430:319): avc: denied { open } for pid=10558 comm="syz-executor.4" path="/dev/input/event0" dev="devtmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 785.437719][T10567] loop4: detected capacity change from 0 to 40427 [ 785.450515][T10567] F2FS-fs (loop4): invalid crc value [ 785.462741][T10567] F2FS-fs (loop4): Found nat_bits in checkpoint [ 785.508560][T10567] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 785.523719][ T26] audit: type=1400 audit(1691480329.970:320): avc: denied { write } for pid=10566 comm="syz-executor.4" name="/" dev="loop4" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 785.554063][ T26] audit: type=1400 audit(1691480329.970:321): avc: denied { add_name } for pid=10566 comm="syz-executor.4" name="blkio.throttle.io_serviced_recursive" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 785.577940][ T26] audit: type=1400 audit(1691480329.970:322): avc: denied { create } for pid=10566 comm="syz-executor.4" name="blkio.throttle.io_serviced_recursive" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 07:38:50 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x0, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x0, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x0) dup(0xffffffffffffffff) sendmsg$sock(r4, 0x0, 0x0) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:38:50 executing program 5: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_GET_ERRCODE(r0, 0xc0404309, 0x0) 07:38:50 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x993c41651a677098}, 0xe) 07:38:50 executing program 2: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x1000011, &(0x7f0000000100)={[{@check_relaxed}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}]}, 0x1, 0x95e, &(0x7f0000000140)="$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") open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) 07:38:50 executing program 4: syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f0000005600)="$eJzs3M1rI2UYAPBn2u1+uxbx4G0HFqGFTdj0Y9Fb1V38wC7Fj4MnTZM0ZDfJlCZNa08ePIoH/xNR8OTRv8GDZ2/iQfEmKJmZ6tYvhKaNtb8fTJ6ZN2+eed5QCs9MmADOrfn0px+SuBFXImI2Iq5H5PtJueXWivBMRNyMiJnHtqQc/23gYkRcjYgb4+RFzqR865Pbo1ur37/245dfX7pw7dMvvpneqoFpezYietvF/l6viFm7iA/L8fqok8feyqiMxRu9R+VxVsS91maeYa9+OK+ex+V2MT/b3h2MY5LUG+PY7mzl49v94oSDUfswT/6Bh/Wd/LjZ2sxjZ5DlsX1Q1LV/UPxvOxgMizzNMt/7efoYDg9jMd7abxXr2X6Ux0Z/WI4XebNma38cR2UsTxeNrNvM69g8zjf93/Z6p7+7n45aO4NO1k9Xq7XnqrW7ldpO1mwNWyuVeq95dyVdaHfH0yrDVr231s6ydrdVbWS9xXSh3WhUarV04V5rs1Pvp7Vadbl6p7K6WO7dTl9+8HbabaYL4/hip7877HQH6Va2kxafWEyXqsvPL6a3aumb6xvpxhv3769vvPXuvXcevLD+6kvlpD+VlS4s3VlaqtTuVJZqi+do/R+WRU9w/XAsybQLADh79P/ANEyj/9/qTq7/D/3/RJyp/ve89/8nsH44Fv0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC59e3cZ6/kO/PF8bVy/ImIm+Ohp8rjJCJmIuKXvzAbF4/knC3zzP3N/Lk/1PBVEnmG8TkuldvViFgrt5+fPOlvAQAAAP6/Pv/g5sdFt168zE+7IE5TcdFm5vp7E8qXRMTc/HcTyjYzfnl6Qsnyv+8LsT+hbPkFrMsTSlZccrswqWz/yuyRcPmxkBRh5lTLAQAATsXRTuB0uxAAAABO00fTLoDpSOLwVubhveD8l/e/3xC8cuQIAAAAOIOSaRcAAAAAnLi8//+H5/+F5/8BAADA2Vc8/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiVnfvJSR2K4gB8Wuh7vD9GYpy7FWewDJfg0KFhAW6CJeAW3ABrwJlLMGBoS7QGE5PetpF8X9JebkN+nBIm515SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJzsZo/3l89tM3Z7tpJczcAAADAMZtiNS9fTKv5v/r6WX3pop5nEZFHxLHefRS/GpmjOqf44v3FpxqeIsqE/Wf8ro+/EXFdH6/nXX8LAAAAcLrWi+Ws6tar03ToguhTtWiT/79JlJdFRDF9SZSW70+XicLK3/c47hKllQtYk0Rh1ZLbOFXat4waw+TDkFVD3ms5AABAL5qdQL9dCAAAAH26HboAhpHFYSvzsBdc/vP+fUPwT2MGAAAA/EDZ0AUAAAAAnSv7f8//AwAAgNNWPf8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALm2K1Xy9WM7a5mx37aS5GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgjf15R4EQCIMw2Lu+M5n7H1YaNDU1qQLh428MBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9uclBUIgCKJgzvjfSd//sJKgZxAhAhoeVdSiAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAudu7nNY4qDgD4d2Z2trYqxig5RETBg17sdlNbe/WgBA/+CUJItzW69Ueagy1FyMWb5NyL6FFEUOKt/0PPLfRSbz3soYJnZWZnmmkacLV0Zpt8PvD2fWcY5n3fJIR8570EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2eW8vzoqPhWmcVudu3b+2XvS39/WFGzt3lotWxEmbST8dXm0eJEvdJQIAAMDRkdX1fUTczXdXiz5dKOv/vL6mqPl/eH4a1/X8/rq/7uvav2i//3bv5QcDLUzHKW56YWM8OvVoKr0nN8v59sK/XtErn3z57iUrvyDph9svTfLyeSbf3bz5fr8Mj7WRLQDwf5ys+yqofx8q+mGXiQFwZPQahXdd/2cL3eYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0IbJdjxbx0lELPf24sLt+9fWD+pv7NxZrtvZ69d3mvcsbpFHxIWN8ehUi3OZd5evXP1sbTwebbYfvBYR3Y1eBR/PcE1ElxkKHjdIq+/1ecnn6Qg6/sEEAMChk1etqOvv5rurxblkMeLvHx+u/99sxDFj/X/vk7O3mmM16/9hazOcf4OtS18OLl+5+vbGpbWLo4ujz99ZGb47PH3uzJlzg/JdycAbEwAAAB5PP4no76v/08VH1/9PNOKYsf7/6vvhN82xMvX/gfYW/brOBAAA4Gh78fW//kwOOJ/0+/H12tbW5nD6WR3H5kp5vNJBqv/Zsao16/9sseusAAAAgDZMtpOH1v/PN+KYcf3/uZ9e+aV5zywijlfr/yfXvxifb286c62NPyfueo4AAAB063jVmuv/ebn/P32w5SGNiLfemMbVvwGcqf7PPvj25+ZYzf3/p9ub4lxKl6bPo+yXInpLXWcEAADAYfZM1Ypi/498d/XTX0981Lf/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBt/wQAAP//K8ZAQg==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r1}) [ 785.618508][ T26] audit: type=1400 audit(1691480330.000:323): avc: denied { read append open } for pid=10566 comm="syz-executor.4" path="/root/syzkaller-testdir630606028/syzkaller.LMa8Q3/284/bus/blkio.throttle.io_serviced_recursive" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 785.668660][ T26] audit: type=1400 audit(1691480330.060:324): avc: denied { ioctl } for pid=10566 comm="syz-executor.4" path="/root/syzkaller-testdir630606028/syzkaller.LMa8Q3/284/bus/blkio.throttle.io_serviced_recursive" dev="loop4" ino=10 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 07:38:50 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080), 0xe) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 785.729332][ T5062] syz-executor.4: attempt to access beyond end of device [ 785.729332][ T5062] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 07:38:50 executing program 1: connect$qrtr(0xffffffffffffffff, 0x0, 0x0) [ 785.838783][T10578] loop2: detected capacity change from 0 to 1764 07:38:50 executing program 5: syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f0000005600)="$eJzs3M1rI2UYAPBn2u1+uxbx4G0HFqGFTdj0Y9Fb1V38wC7Fj4MnTZM0ZDfJlCZNa08ePIoH/xNR8OTRv8GDZ2/iQfEmKJmZ6tYvhKaNtb8fTJ6ZN2+eed5QCs9MmADOrfn0px+SuBFXImI2Iq5H5PtJueXWivBMRNyMiJnHtqQc/23gYkRcjYgb4+RFzqR865Pbo1ur37/245dfX7pw7dMvvpneqoFpezYietvF/l6viFm7iA/L8fqok8feyqiMxRu9R+VxVsS91maeYa9+OK+ex+V2MT/b3h2MY5LUG+PY7mzl49v94oSDUfswT/6Bh/Wd/LjZ2sxjZ5DlsX1Q1LV/UPxvOxgMizzNMt/7efoYDg9jMd7abxXr2X6Ux0Z/WI4XebNma38cR2UsTxeNrNvM69g8zjf93/Z6p7+7n45aO4NO1k9Xq7XnqrW7ldpO1mwNWyuVeq95dyVdaHfH0yrDVr231s6ydrdVbWS9xXSh3WhUarV04V5rs1Pvp7Vadbl6p7K6WO7dTl9+8HbabaYL4/hip7877HQH6Va2kxafWEyXqsvPL6a3aumb6xvpxhv3769vvPXuvXcevLD+6kvlpD+VlS4s3VlaqtTuVJZqi+do/R+WRU9w/XAsybQLADh79P/ANEyj/9/qTq7/D/3/RJyp/ve89/8nsH44Fv0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC59e3cZ6/kO/PF8bVy/ImIm+Ohp8rjJCJmIuKXvzAbF4/knC3zzP3N/Lk/1PBVEnmG8TkuldvViFgrt5+fPOlvAQAAAP6/Pv/g5sdFt168zE+7IE5TcdFm5vp7E8qXRMTc/HcTyjYzfnl6Qsnyv+8LsT+hbPkFrMsTSlZccrswqWz/yuyRcPmxkBRh5lTLAQAATsXRTuB0uxAAAABO00fTLoDpSOLwVubhveD8l/e/3xC8cuQIAAAAOIOSaRcAAAAAnLi8//+H5/+F5/8BAADA2Vc8/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiVnfvJSR2K4gB8Wuh7vD9GYpy7FWewDJfg0KFhAW6CJeAW3ABrwJlLMGBoS7QGE5PetpF8X9JebkN+nBIm515SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJzsZo/3l89tM3Z7tpJczcAAADAMZtiNS9fTKv5v/r6WX3pop5nEZFHxLHefRS/GpmjOqf44v3FpxqeIsqE/Wf8ro+/EXFdH6/nXX8LAAAAcLrWi+Ws6tar03ToguhTtWiT/79JlJdFRDF9SZSW70+XicLK3/c47hKllQtYk0Rh1ZLbOFXat4waw+TDkFVD3ms5AABAL5qdQL9dCAAAAH26HboAhpHFYSvzsBdc/vP+fUPwT2MGAAAA/EDZ0AUAAAAAnSv7f8//AwAAgNNWPf8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALm2K1Xy9WM7a5mx37aS5GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgjf15R4EQCIMw2Lu+M5n7H1YaNDU1qQLh428MBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9uclBUIgCKJgzvjfSd//sJKgZxAhAhoeVdSiAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAudu7nNY4qDgD4d2Z2trYqxig5RETBg17sdlNbe/WgBA/+CUJItzW69Ueagy1FyMWb5NyL6FFEUOKt/0PPLfRSbz3soYJnZWZnmmkacLV0Zpt8PvD2fWcY5n3fJIR8570EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2eW8vzoqPhWmcVudu3b+2XvS39/WFGzt3lotWxEmbST8dXm0eJEvdJQIAAMDRkdX1fUTczXdXiz5dKOv/vL6mqPl/eH4a1/X8/rq/7uvav2i//3bv5QcDLUzHKW56YWM8OvVoKr0nN8v59sK/XtErn3z57iUrvyDph9svTfLyeSbf3bz5fr8Mj7WRLQDwf5ys+yqofx8q+mGXiQFwZPQahXdd/2cL3eYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0IbJdjxbx0lELPf24sLt+9fWD+pv7NxZrtvZ69d3mvcsbpFHxIWN8ehUi3OZd5evXP1sbTwebbYfvBYR3Y1eBR/PcE1ElxkKHjdIq+/1ecnn6Qg6/sEEAMChk1etqOvv5rurxblkMeLvHx+u/99sxDFj/X/vk7O3mmM16/9hazOcf4OtS18OLl+5+vbGpbWLo4ujz99ZGb47PH3uzJlzg/JdycAbEwAAAB5PP4no76v/08VH1/9PNOKYsf7/6vvhN82xMvX/gfYW/brOBAAA4Gh78fW//kwOOJ/0+/H12tbW5nD6WR3H5kp5vNJBqv/Zsao16/9sseusAAAAgDZMtpOH1v/PN+KYcf3/uZ9e+aV5zywijlfr/yfXvxifb286c62NPyfueo4AAAB063jVmuv/ebn/P32w5SGNiLfemMbVvwGcqf7PPvj25+ZYzf3/p9ub4lxKl6bPo+yXInpLXWcEAADAYfZM1Ypi/498d/XTX0981Lf/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBt/wQAAP//K8ZAQg==") r0 = open(&(0x7f00000001c0)='./bus\x00', 0x143142, 0x0) write$eventfd(r0, &(0x7f00000000c0), 0x8) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x143142, 0x0) write$eventfd(r1, 0x0, 0x0) [ 785.873491][ T26] audit: type=1400 audit(1691480330.190:325): avc: denied { connect } for pid=10573 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 786.895316][T10585] loop5: detected capacity change from 0 to 40427 [ 786.935800][T10585] F2FS-fs (loop5): invalid crc value [ 787.017822][T10585] F2FS-fs (loop5): Found nat_bits in checkpoint [ 787.212241][T10590] loop4: detected capacity change from 0 to 40427 [ 787.223913][T10585] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 787.232553][T10590] F2FS-fs (loop4): invalid crc value [ 787.248262][ T26] audit: type=1400 audit(1691480331.690:326): avc: denied { write } for pid=10584 comm="syz-executor.5" path="/root/syzkaller-testdir4286043555/syzkaller.7dJzFf/323/bus/bus" dev="loop5" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 787.288634][T10585] syz-executor.5: attempt to access beyond end of device [ 787.288634][T10585] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 787.334062][T10590] F2FS-fs (loop4): Found nat_bits in checkpoint [ 787.499675][T10590] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 787.645685][ T5062] syz-executor.4: attempt to access beyond end of device [ 787.645685][ T5062] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 07:38:52 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) open_tree(0xffffffffffffffff, 0x0, 0x81900) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x0, 0x5, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0x5, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x101000) dup(0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x2) sendmsg$sock(r4, &(0x7f0000000500)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x40040) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:38:52 executing program 2: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 07:38:52 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = gettid() r2 = gettid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f00000000c0)) 07:38:52 executing program 5: syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c646174615f666c7573682c66617374626f6f742c6a71666d743d76667376312c6e6f696e6c696e655f64656e7472792c7573726a71756f74613d66326673002c00ff371013587045d0d273e856ce75c2b11120ece6ac75541f2db63fb857cb7508f7d6a76856a2cdd8c835ef14aa3aea583b7f3affd12ff9abc9b2109887e1a78c2003f04a75607f0099dfad1a283ce7b8b528e239692ab156e30dd8365f708e6c98cfcd0b30d5304dd70f87da026e2d4e4df1ad07ba72683f43d76541d455d1fa118fe5f4727309fe28bfded255e7c5806f05b80ec0e186b4f72759eb096a1fe6793e734fe61555f01ff9f23bc11370aa247215e8f1410ea4720a4c7ddb25da21c75f35f71158ad1c795865ccb7a707c8a3ea61ae2a531b6790465e62c98880eb0a890492bcbf22f6c7ab7dc5f8014e25172bb39c75d1a54a9adc42f1691831698de3d489821d10"], 0x1, 0x54f4, &(0x7f0000005600)="$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") r0 = open(&(0x7f00000001c0)='./bus\x00', 0x143142, 0x0) write$eventfd(r0, &(0x7f00000000c0), 0x8) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x143142, 0x0) write$eventfd(r1, 0x0, 0x0) [ 788.513731][T10602] loop5: detected capacity change from 0 to 40427 [ 788.522982][T10602] F2FS-fs (loop5): invalid crc value [ 788.532593][T10602] F2FS-fs (loop5): Found nat_bits in checkpoint [ 788.582830][T10602] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 788.628267][T10602] syz-executor.5: attempt to access beyond end of device [ 788.628267][T10602] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 07:38:53 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x46100) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000ffc000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r4, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000600)={0x0, 0x649, {0x0}, {0xee01}, 0x66a, 0x3}) ptrace$getregset(0x4204, r5, 0x0, &(0x7f0000000740)={&(0x7f0000000640)=""/232, 0xe8}) syz_open_pts(r0, 0x0) dup(0xffffffffffffffff) sendmsg$sock(r4, 0x0, 0x0) ioctl$KIOCSOUND(r0, 0x5425, 0x0) 07:38:53 executing program 4: syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f0000005600)="$eJzs3M1rI2UYAPBn2u1+uxbx4G0HFqGFTdj0Y9Fb1V38wC7Fj4MnTZM0ZDfJlCZNa08ePIoH/xNR8OTRv8GDZ2/iQfEmKJmZ6tYvhKaNtb8fTJ6ZN2+eed5QCs9MmADOrfn0px+SuBFXImI2Iq5H5PtJueXWivBMRNyMiJnHtqQc/23gYkRcjYgb4+RFzqR865Pbo1ur37/245dfX7pw7dMvvpneqoFpezYietvF/l6viFm7iA/L8fqok8feyqiMxRu9R+VxVsS91maeYa9+OK+ex+V2MT/b3h2MY5LUG+PY7mzl49v94oSDUfswT/6Bh/Wd/LjZ2sxjZ5DlsX1Q1LV/UPxvOxgMizzNMt/7efoYDg9jMd7abxXr2X6Ux0Z/WI4XebNma38cR2UsTxeNrNvM69g8zjf93/Z6p7+7n45aO4NO1k9Xq7XnqrW7ldpO1mwNWyuVeq95dyVdaHfH0yrDVr231s6ydrdVbWS9xXSh3WhUarV04V5rs1Pvp7Vadbl6p7K6WO7dTl9+8HbabaYL4/hip7877HQH6Va2kxafWEyXqsvPL6a3aumb6xvpxhv3769vvPXuvXcevLD+6kvlpD+VlS4s3VlaqtTuVJZqi+do/R+WRU9w/XAsybQLADh79P/ANEyj/9/qTq7/D/3/RJyp/ve89/8nsH44Fv0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC59e3cZ6/kO/PF8bVy/ImIm+Ohp8rjJCJmIuKXvzAbF4/knC3zzP3N/Lk/1PBVEnmG8TkuldvViFgrt5+fPOlvAQAAAP6/Pv/g5sdFt168zE+7IE5TcdFm5vp7E8qXRMTc/HcTyjYzfnl6Qsnyv+8LsT+hbPkFrMsTSlZccrswqWz/yuyRcPmxkBRh5lTLAQAATsXRTuB0uxAAAABO00fTLoDpSOLwVubhveD8l/e/3xC8cuQIAAAAOIOSaRcAAAAAnLi8//+H5/+F5/8BAADA2Vc8/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiVnfvJSR2K4gB8Wuh7vD9GYpy7FWewDJfg0KFhAW6CJeAW3ABrwJlLMGBoS7QGE5PetpF8X9JebkN+nBIm515SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJzsZo/3l89tM3Z7tpJczcAAADAMZtiNS9fTKv5v/r6WX3pop5nEZFHxLHefRS/GpmjOqf44v3FpxqeIsqE/Wf8ro+/EXFdH6/nXX8LAAAAcLrWi+Ws6tar03ToguhTtWiT/79JlJdFRDF9SZSW70+XicLK3/c47hKllQtYk0Rh1ZLbOFXat4waw+TDkFVD3ms5AABAL5qdQL9dCAAAAH26HboAhpHFYSvzsBdc/vP+fUPwT2MGAAAA/EDZ0AUAAAAAnSv7f8//AwAAgNNWPf8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALm2K1Xy9WM7a5mx37aS5GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgjf15R4EQCIMw2Lu+M5n7H1YaNDU1qQLh428MBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9uclBUIgCKJgzvjfSd//sJKgZxAhAhoeVdSiAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAudu7nNY4qDgD4d2Z2trYqxig5RETBg17sdlNbe/WgBA/+CUJItzW69Ueagy1FyMWb5NyL6FFEUOKt/0PPLfRSbz3soYJnZWZnmmkacLV0Zpt8PvD2fWcY5n3fJIR8570EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2eW8vzoqPhWmcVudu3b+2XvS39/WFGzt3lotWxEmbST8dXm0eJEvdJQIAAMDRkdX1fUTczXdXiz5dKOv/vL6mqPl/eH4a1/X8/rq/7uvav2i//3bv5QcDLUzHKW56YWM8OvVoKr0nN8v59sK/XtErn3z57iUrvyDph9svTfLyeSbf3bz5fr8Mj7WRLQDwf5ys+yqofx8q+mGXiQFwZPQahXdd/2cL3eYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0IbJdjxbx0lELPf24sLt+9fWD+pv7NxZrtvZ69d3mvcsbpFHxIWN8ehUi3OZd5evXP1sbTwebbYfvBYR3Y1eBR/PcE1ElxkKHjdIq+/1ecnn6Qg6/sEEAMChk1etqOvv5rurxblkMeLvHx+u/99sxDFj/X/vk7O3mmM16/9hazOcf4OtS18OLl+5+vbGpbWLo4ujz99ZGb47PH3uzJlzg/JdycAbEwAAAB5PP4no76v/08VH1/9PNOKYsf7/6vvhN82xMvX/gfYW/brOBAAA4Gh78fW//kwOOJ/0+/H12tbW5nD6WR3H5kp5vNJBqv/Zsao16/9sseusAAAAgDZMtpOH1v/PN+KYcf3/uZ9e+aV5zywijlfr/yfXvxifb286c62NPyfueo4AAAB063jVmuv/ebn/P32w5SGNiLfemMbVvwGcqf7PPvj25+ZYzf3/p9ub4lxKl6bPo+yXInpLXWcEAADAYfZM1Ypi/498d/XTX0981Lf/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBt/wQAAP//K8ZAQg==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r1}) 07:38:53 executing program 1: syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f0000005600)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) sync() ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000000c0)={0x0, 0x8}) 07:38:53 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000340)=0x8040, 0x4) 07:38:53 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) getrlimit(0x0, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0xfffffcc7, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 07:38:53 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x5) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) 07:38:53 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080), 0xe) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000040)) 07:38:53 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="6320cf93565a", @remote, @val, {@ipv4}}, 0x0) [ 808.641582][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.647914][ T1233] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.081847][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.088176][ T1233] ieee802154 phy1 wpan1: encryption failed: -22 [ 897.500611][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 897.507640][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10630/1:b..l P5952/1:b..l [ 897.517080][ C1] rcu: (detected by 1, t=10502 jiffies, g=50997, q=149 ncpus=2) [ 897.524780][ C1] task:udevd state:R running task stack:26304 pid:5952 ppid:4470 flags:0x00000002 [ 897.536064][ C1] Call Trace: [ 897.539329][ C1] [ 897.542249][ C1] __schedule+0xee1/0x59f0 [ 897.546765][ C1] ? io_schedule_timeout+0x150/0x150 [ 897.552037][ C1] ? mark_lock+0x105/0x1950 [ 897.556568][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 897.562736][ C1] ? lockdep_hardirqs_on+0x7d/0x100 [ 897.567926][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 897.573295][ C1] preempt_schedule_common+0x45/0xc0 [ 897.578568][ C1] preempt_schedule_thunk+0x1a/0x30 [ 897.583754][ C1] unwind_next_frame+0x16b4/0x2020 [ 897.588881][ C1] ? tlb_batch_pages_flush+0x9a/0x190 [ 897.594260][ C1] ? write_profile+0x450/0x450 [ 897.599010][ C1] arch_stack_walk+0x8b/0xf0 [ 897.603593][ C1] ? tlb_finish_mmu+0x14b/0x7e0 [ 897.608436][ C1] stack_trace_save+0x96/0xd0 [ 897.613104][ C1] ? filter_irq_stacks+0x90/0x90 [ 897.618036][ C1] save_stack+0x160/0x1f0 [ 897.622362][ C1] ? register_early_stack+0xd0/0xd0 [ 897.627546][ C1] ? lock_sync+0x190/0x190 [ 897.631949][ C1] ? free_unref_page_prepare+0x508/0xb90 [ 897.637562][ C1] ? free_unref_page_list+0xe6/0xb30 [ 897.642831][ C1] ? release_pages+0x32a/0x14e0 [ 897.647683][ C1] ? tlb_batch_pages_flush+0x9a/0x190 [ 897.653049][ C1] __reset_page_owner+0x5a/0x190 [ 897.657973][ C1] ? rcu_is_watching+0x12/0xb0 [ 897.662724][ C1] free_unref_page_prepare+0x508/0xb90 [ 897.668168][ C1] ? __mem_cgroup_uncharge_list+0x116/0x170 [ 897.674045][ C1] free_unref_page_list+0xe6/0xb30 [ 897.679138][ C1] ? _raw_spin_unlock_irqrestore+0x4e/0x70 [ 897.684934][ C1] release_pages+0x32a/0x14e0 [ 897.689601][ C1] ? put_pages_list+0x5a0/0x5a0 [ 897.694442][ C1] ? free_swap_cache+0xa4/0x3d0 [ 897.699279][ C1] tlb_batch_pages_flush+0x9a/0x190 [ 897.704470][ C1] tlb_finish_mmu+0x14b/0x7e0 [ 897.709131][ C1] exit_mmap+0x2db/0x960 [ 897.713366][ C1] ? do_vma_munmap+0x70/0x70 [ 897.717949][ C1] __mmput+0x12a/0x4d0 [ 897.722003][ C1] mmput+0x62/0x70 [ 897.725706][ C1] do_exit+0x9b4/0x2a20 [ 897.729868][ C1] ? do_group_exit+0x1c5/0x2a0 [ 897.734621][ C1] ? reacquire_held_locks+0x4b0/0x4b0 [ 897.739983][ C1] ? do_raw_spin_lock+0x12e/0x2b0 [ 897.744996][ C1] ? mm_update_next_owner+0x7d0/0x7d0 [ 897.750359][ C1] ? spin_bug+0x1d0/0x1d0 [ 897.754680][ C1] do_group_exit+0xd4/0x2a0 [ 897.759172][ C1] __x64_sys_exit_group+0x3e/0x50 [ 897.764186][ C1] do_syscall_64+0x38/0xb0 [ 897.768589][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 897.774469][ C1] RIP: 0033:0x7f567f6fca90 [ 897.778869][ C1] RSP: 002b:00007fff6cffa218 EFLAGS: 00000216 ORIG_RAX: 00000000000000e7 [ 897.787268][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f567f6fca90 [ 897.795226][ C1] RDX: 00000000000000e7 RSI: 000000000000003c RDI: 0000000000000000 [ 897.803183][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 87ffbc33cf6266d4 [ 897.811146][ C1] R10: 00000000ffffffff R11: 0000000000000216 R12: 000055ba4357caa0 [ 897.819108][ C1] R13: 00007fff6cffa258 R14: 0000000000000001 R15: 000055ba435452c0 [ 897.827066][ C1] [ 897.830069][ C1] task:syz-executor.5 state:R running task stack:27232 pid:10630 ppid:5060 flags:0x00004002 [ 897.840835][ C1] Call Trace: [ 897.844105][ C1] [ 897.847034][ C1] __schedule+0xee1/0x59f0 [ 897.851441][ C1] ? filter_irq_stacks+0x90/0x90 [ 897.856370][ C1] ? io_schedule_timeout+0x150/0x150 [ 897.861650][ C1] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 897.867618][ C1] preempt_schedule_irq+0x52/0x90 [ 897.872628][ C1] irqentry_exit+0x35/0x80 [ 897.877031][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 897.883000][ C1] RIP: 0010:kasan_check_range+0x49/0x190 [ 897.888618][ C1] Code: 00 00 48 b8 ff ff ff ff ff 7f ff ff 48 39 f8 0f 83 b3 00 00 00 4c 8d 54 37 ff 48 89 fd 48 b8 00 00 00 00 00 fc ff df 4d 89 d1 <48> c1 ed 03 49 c1 e9 03 48 01 c5 49 01 c1 48 89 e8 49 8d 59 01 48 [ 897.908212][ C1] RSP: 0018:ffffc900054df478 EFLAGS: 00000283 [ 897.914274][ C1] RAX: dffffc0000000000 RBX: 1ffff92000a9be95 RCX: ffffffff81663077 [ 897.922246][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8eaad6d0 [ 897.930200][ C1] RBP: ffffffff8eaad6d0 R08: 0000000000000000 R09: ffffffff8eaad6d7 [ 897.938155][ C1] R10: ffffffff8eaad6d7 R11: 0000000000000000 R12: 0000000000000000 [ 897.946124][ C1] R13: 0000000000000000 R14: ffffffff8c9a3340 R15: 0000000000000000 [ 897.954079][ C1] ? lock_acquire+0xb7/0x510 [ 897.958659][ C1] lock_acquire+0xb7/0x510 [ 897.963060][ C1] ? lock_sync+0x190/0x190 [ 897.967460][ C1] ? mod_objcg_state+0x59d/0x9e0 [ 897.972399][ C1] ? lockdep_hardirqs_on+0x7d/0x100 [ 897.977582][ C1] percpu_ref_put_many.constprop.0+0x29/0x100 [ 897.983635][ C1] ? cache_reap+0x330/0x330 [ 897.988126][ C1] kmem_cache_alloc_node+0x1ae/0x540 [ 897.993403][ C1] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 897.999364][ C1] __alloc_skb+0x287/0x330 [ 898.003850][ C1] ? __napi_build_skb+0x50/0x50 [ 898.008689][ C1] ? __lock_acquire+0x182f/0x5de0 [ 898.013715][ C1] alloc_skb_with_frags+0x9d/0x700 [ 898.018816][ C1] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 898.024787][ C1] sock_alloc_send_pskb+0x7c8/0x950 [ 898.029969][ C1] ? sock_wmalloc+0x120/0x120 [ 898.034627][ C1] ? reacquire_held_locks+0x4b0/0x4b0 [ 898.039981][ C1] ? do_raw_spin_lock+0x12e/0x2b0 [ 898.044990][ C1] ? spin_bug+0x1d0/0x1d0 [ 898.049305][ C1] unix_dgram_sendmsg+0x455/0x1c30 [ 898.054460][ C1] ? unix_dgram_connect+0xba0/0xba0 [ 898.059649][ C1] ? unix_dgram_connect+0xba0/0xba0 [ 898.064832][ C1] sock_sendmsg+0xd9/0x180 [ 898.069237][ C1] ____sys_sendmsg+0x2ac/0x940 [ 898.073985][ C1] ? copy_msghdr_from_user+0x10b/0x160 [ 898.079445][ C1] ? kernel_sendmsg+0x50/0x50 [ 898.084107][ C1] ___sys_sendmsg+0x135/0x1d0 [ 898.088769][ C1] ? do_recvmmsg+0x740/0x740 [ 898.093350][ C1] ? preempt_count_sub+0x150/0x150 [ 898.098450][ C1] __sys_sendmmsg+0x1a1/0x450 [ 898.103116][ C1] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 898.108131][ C1] ? reacquire_held_locks+0x4b0/0x4b0 [ 898.113489][ C1] ? rcu_is_watching+0x12/0xb0 [ 898.118241][ C1] ? folio_memcg_unlock+0x2d0/0x2d0 [ 898.123431][ C1] __x64_sys_sendmmsg+0x9c/0x100 [ 898.128356][ C1] ? syscall_enter_from_user_mode+0x26/0x80 [ 898.134242][ C1] do_syscall_64+0x38/0xb0 [ 898.138650][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 898.144553][ C1] RIP: 0033:0x7fb04fe7cae9 [ 898.148951][ C1] RSP: 002b:00007fb04e9dd0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 898.157357][ C1] RAX: ffffffffffffffda RBX: 00007fb04ff9c120 RCX: 00007fb04fe7cae9 [ 898.165318][ C1] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000006 [ 898.173276][ C1] RBP: 00007fb04fec847a R08: 0000000000000000 R09: 0000000000000000 [ 898.181234][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 898.189187][ C1] R13: 000000000000006e R14: 00007fb04ff9c120 R15: 00007ffcf3fd5d08 [ 898.197145][ C1] [ 898.200150][ C1] rcu: rcu_preempt kthread starved for 9940 jiffies! g50997 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 898.211240][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 898.221205][ C1] rcu: RCU grace-period kthread stack dump: [ 898.227075][ C1] task:rcu_preempt state:R running task stack:28496 pid:15 ppid:2 flags:0x00004000 [ 898.239741][ C1] Call Trace: [ 898.243010][ C1] [ 898.245928][ C1] __schedule+0xee1/0x59f0 [ 898.250355][ C1] ? io_schedule_timeout+0x150/0x150 [ 898.255635][ C1] ? timer_fixup_activate+0x2b0/0x2b0 [ 898.260998][ C1] schedule+0xe7/0x1b0 [ 898.265056][ C1] schedule_timeout+0x157/0x2c0 [ 898.269896][ C1] ? usleep_range_state+0x1a0/0x1a0 [ 898.275083][ C1] ? destroy_timer_on_stack+0x20/0x20 [ 898.280442][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 898.286634][ C1] ? prepare_to_swait_event+0xf5/0x470 [ 898.292085][ C1] rcu_gp_fqs_loop+0x1ec/0xa50 [ 898.296830][ C1] ? force_qs_rnp+0x8d0/0x8d0 [ 898.301492][ C1] ? _raw_spin_unlock_irqrestore+0x4e/0x70 [ 898.307292][ C1] rcu_gp_kthread+0x249/0x380 [ 898.311973][ C1] ? rcu_gp_init+0x14e0/0x14e0 [ 898.316720][ C1] ? __kthread_parkme+0x152/0x220 [ 898.321744][ C1] ? rcu_gp_init+0x14e0/0x14e0 [ 898.326511][ C1] kthread+0x33a/0x430 [ 898.330575][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 898.336209][ C1] ret_from_fork+0x2c/0x70 [ 898.340627][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 898.346261][ C1] ret_from_fork_asm+0x11/0x20 [ 898.351019][ C1] [ 898.354024][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 898.360326][ C1] Sending NMI from CPU 1 to CPUs 0: [ 898.365526][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x1b/0x20