_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000100)=0x3, 0x4) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self\x00', 0x88000, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000000)=0x5, 0x4) 20:12:51 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x5000) r0 = shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0xe000) shmdt(r0) r1 = shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmdt(r1) shmdt(r1) 20:12:51 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 20:12:51 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:12:51 executing program 0: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:12:51 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000340), 0x4) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) 20:12:51 executing program 1: shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) shmdt(0x0) syz_io_uring_setup(0x2fc3, &(0x7f0000000000)={0x0, 0xb64c, 0x8, 0x0, 0x1d2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 20:12:51 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x20000, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xac, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x20}}]}, 0xac}, 0x1, 0x0, 0x0, 0xfe35ce30b2189764}, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r1, 0x100, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) r3 = gettid() getpgid(r3) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xf4, r1, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x8001) r5 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:12:51 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:12:51 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 20:12:51 executing program 0: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:12:51 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x5000) shmdt(0x0) 20:12:51 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) waitid(0x1, 0x0, &(0x7f0000000000), 0x2, &(0x7f0000000080)) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000340), 0x4) 20:12:51 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x9c, r1, 0x4, 0x70bd26, 0x25dfdbfb, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}]}, 0x9c}}, 0x0) 20:12:51 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:12:51 executing program 0: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x0) 20:12:51 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 20:12:51 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x2, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000340)=0x6, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20000, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000040)) 20:12:51 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil) shmdt(0x0) 20:12:51 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x1b4, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x9}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xffe0}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x6}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x8}, {0x6}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x9}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x486}, {0x6, 0x11, 0x200}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x5}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000004) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:12:51 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:12:52 executing program 0: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x0) 20:12:52 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 20:12:52 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x428102, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x1a500) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000240)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r0}) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000100)={0x6, 0xfffff282, 0x10, 0x20, [], [], [], 0x88c8, 0x1000, 0x6, 0x20, "e18de61bcff47670ca6971cac0604159"}) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000340), 0x4) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x381801, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000640)={0x7, 0xa, 0x0, [{0x80000000, 0x5, 0x101, 0x41, 0x8, 0xe0, 0x6}, {0xd90, 0x5, 0x180000, 0x94, 0x8, 0x4, 0x8}, {0x0, 0x7fffffff, 0x3, 0x4, 0x0, 0x4}, {0x3f, 0x2, 0x1, 0x4, 0x1, 0x3f, 0x5}, {0x2, 0x0, 0x1, 0x89, 0x2, 0xc5, 0x8}, {0x1, 0x9, 0x100000001, 0x20, 0x9, 0x81, 0x81}, {0x7fff, 0x10001, 0x0, 0x8, 0x6, 0x9, 0xf7}, {0x7, 0x2, 0x3, 0x6, 0x0, 0x7f, 0x3}, {0x7, 0x400, 0xfff, 0x20, 0x7, 0x6, 0x5f}, {0x9, 0x5, 0x1, 0x0, 0x6, 0x80, 0xdc}]}) ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000080)) 20:12:52 executing program 1: shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x3000) shmdt(0x0) 20:12:52 executing program 0: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x0) 20:12:52 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:12:52 executing program 3: kexec_load(0x3, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="56739e2cf3ad7ac846daad34c097b0442e491624f7c7df994204e1274e16dfdb132d05cfd0cf17e7efdfcd2a74109c88c7", 0x31, 0x8, 0x800}], 0x150000) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = gettid() getpgid(r2) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f00000002c0)={{0x9, 0x4, 0x8, 0x0, '\x00', 0x3f}, 0x4, 0x100, 0x8, r2, 0x4, 0x0, 'syz1\x00', &(0x7f0000000200)=['&**}]\x00', '/sys/kernel/debug/binder/transaction_log\x00', '/sys/kernel/debug/binder/transaction_log\x00', '/sys/kernel/debug/binder/transaction_log\x00'], 0x81, [], [0x5, 0x100, 0xccd, 0x97b]}) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000100)) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000040)={0x0, 0x4, 0xa5c2, &(0x7f0000000180)=0x7}) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:12:52 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 20:12:52 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x80800, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000080)=0x5, 0x4) 20:12:52 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x2000) r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r0) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r1) r2 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r2) shmdt(0x0) 20:12:52 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x0) 20:12:52 executing program 0: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x0) 20:12:52 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 20:12:52 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = gettid() getpgid(r1) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000006c0)='l2tp\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r3, &(0x7f0000000900), 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)={0x70, r2, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r3}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x28880}, 0x40005) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r5, &(0x7f0000000900), 0x2, 0x0) openat$cgroup_type(r5, &(0x7f0000000640)='cgroup.type\x00', 0x2, 0x0) waitid$P_PIDFD(0x3, r4, &(0x7f0000000900), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000100)={{0x3, 0x6, 0x7fff, 0x200, 'syz0\x00', 0xfffffff8}, 0x1, [0x5, 0x80, 0x5, 0x4365, 0x0, 0x9, 0x1, 0x4, 0x468, 0x7ff, 0x8, 0x9, 0x3f, 0x200, 0x9, 0x8, 0x401, 0x81, 0x2, 0xff, 0x4, 0x8000, 0x3ff, 0x5, 0x100000000, 0x7, 0x5, 0x80000000, 0x3, 0x1, 0x8, 0x2, 0x24, 0x9, 0x1f, 0x4, 0x5, 0x8, 0x6, 0x7, 0x8000000000000, 0x9, 0x0, 0xf7, 0x7, 0x3, 0x4, 0xffff, 0x401, 0x5, 0x8, 0x64d, 0x9, 0x7f, 0x5, 0x8, 0x3f, 0x1ff, 0xb54, 0x9, 0x8, 0x8, 0x100, 0x8000, 0x101, 0x6, 0xebb, 0x0, 0x4, 0x5, 0x8, 0x3, 0x7fff, 0x6, 0x10000, 0x100000001, 0x100, 0x4, 0x1, 0xd8c, 0x8000, 0x10000, 0x7fffffff, 0x101, 0x100, 0x61, 0x7f, 0x0, 0x6, 0x100, 0x9, 0x3, 0xd1, 0x3, 0x6, 0x1ff, 0x2, 0x6f1, 0x5, 0x61a2, 0x3, 0x9, 0x1d, 0x7, 0xf6, 0x8001, 0xff, 0x1, 0x2, 0x6, 0x7, 0xdec4, 0x5, 0x2, 0xffff, 0x100000000, 0x8, 0xffff, 0x52, 0x2, 0x6, 0xa6a, 0x7, 0x7, 0x6d87, 0x9, 0x1, 0x7]}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r6, 0x100, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, r6, 0x200, 0x70bd28, 0x25dfdbfe, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044881}, 0x800) getrusage(0x0, &(0x7f0000000840)) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4080, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, r4, &(0x7f0000000040)={0xffffffffffffffff, r7, 0xfffffffd}) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:12:52 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:12:52 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x0) 20:12:52 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 20:12:52 executing program 5: ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, &(0x7f0000000200)) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = getpgid(0x0) r2 = gettid() getpgid(r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x301000, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, &(0x7f0000000300)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000380)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={r4, 0x7444ea77d9f81d91}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r5, &(0x7f0000000900), 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r5, &(0x7f00000001c0)={0xffffffffffffffff, r0, 0xad41}) r6 = syz_open_dev$sndctrl(&(0x7f0000000240)='/dev/snd/controlC#\x00', 0x2, 0x10002) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000280)=0x2) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r7, 0xc1105518, &(0x7f0000000080)={{0x6, 0x5, 0x8000, 0x4, '\x00', 0x80000004}, 0x6, 0x2, 0x2df5, 0x0, 0x5, 0x0, 'syz1\x00', &(0x7f0000000040)=['<\x0e0\x17\f!\x15\xe3\xe2\xc8q\xcf\x15s\xab\xdao\x15\x1fGQZ\x8e\x00\x00\x00\x00\x00\x00\x00', '$\x00', '7p:\x05\x91\t/>\xff\xff,*..\x00', '-*\x00', '\x00'], 0x33, [], [0x1, 0x1334, 0x8d5, 0x1ff]}) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000340), 0x4) 20:12:52 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 20:12:52 executing program 3: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000100), 0x0, &(0x7f0000000180)) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000000)={0x3d, 0x3}) 20:12:52 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:12:52 executing program 1: shmat(0xffffffffffffffff, &(0x7f0000fec000/0x14000)=nil, 0x5000) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x20000, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, r2, 0x100, 0x70bd2b, 0x25dfdbff, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0xd4}}, 0x26044000) socket$inet_dccp(0x2, 0x6, 0x0) 20:12:52 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x0) 20:12:52 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) 20:12:52 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='W\x00\a\x00', @ANYRES16=r1, @ANYBLOB="20002cbd7000fedbdf25030000000500140005000000080019000a0101010c00100004000000000000000c000f0008000000000000000500060005000000"], 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f00000002c0)={{0x8, 0x3, 0x400, 0x7, 'syz1\x00', 0xffffffff}, 0x0, [0x7f, 0x1, 0x2, 0x0, 0x20, 0xffff, 0xde, 0x45, 0x1000, 0x3, 0x1, 0xfffffffffffffff9, 0x5, 0x9, 0x9, 0x9, 0x2, 0x4, 0x1, 0xfffffffffffff1ca, 0xffff, 0x2, 0x9, 0x0, 0x5, 0x200, 0xaeee, 0x3, 0x7, 0x2, 0xfff, 0x4, 0x1, 0x8, 0x9, 0x8, 0x4, 0x2, 0x2, 0x2, 0x200, 0x1f, 0x70a2, 0x3c3e, 0x8, 0x2, 0x163c, 0x1, 0x20, 0x2, 0x800, 0xfff, 0x1, 0x2e, 0xd00, 0xfffffffffffff2e5, 0xffffffffffff8001, 0x0, 0x40, 0x1, 0x40, 0x1, 0x6, 0xffffffff7fffffff, 0xad0a, 0x3, 0xfffffffffffff6a2, 0x1f, 0x5, 0x1, 0xfffffffffffffffc, 0x9, 0x7, 0x7, 0x5, 0x3, 0x3f, 0x9, 0x8, 0x967, 0xfffffffffffffffd, 0xe3, 0x7, 0x7, 0x8, 0x8, 0x40, 0x1, 0x8a, 0x1, 0x9, 0xe390, 0x2, 0x200, 0x1, 0x32fbde4, 0x40, 0x4, 0x1, 0x1, 0x3, 0xb014, 0x100000001, 0x6, 0x8001, 0xffffffffffffff7f, 0x1, 0x5, 0x2, 0x3ff, 0x2, 0x5, 0x2, 0x2, 0xffffffffffffffff, 0x1c, 0xff, 0x5, 0x8, 0x5, 0x9, 0x100000000, 0xff, 0x7, 0x1000000000, 0xcf8, 0x800, 0x5]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x40090}, 0x10) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:12:52 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) socketpair(0x2a, 0xa, 0x92d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000340), 0x4) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000040)) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000080)=0x4) 20:12:52 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:12:52 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x0) r0 = shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ff5000/0xa000)=nil, 0x0) shmdt(0x0) 20:12:52 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = gettid() getpgid(r1) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000006c0)='l2tp\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r3, &(0x7f0000000900), 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)={0x70, r2, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r3}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x28880}, 0x40005) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r5, &(0x7f0000000900), 0x2, 0x0) openat$cgroup_type(r5, &(0x7f0000000640)='cgroup.type\x00', 0x2, 0x0) waitid$P_PIDFD(0x3, r4, &(0x7f0000000900), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000100)={{0x3, 0x6, 0x7fff, 0x200, 'syz0\x00', 0xfffffff8}, 0x1, [0x5, 0x80, 0x5, 0x4365, 0x0, 0x9, 0x1, 0x4, 0x468, 0x7ff, 0x8, 0x9, 0x3f, 0x200, 0x9, 0x8, 0x401, 0x81, 0x2, 0xff, 0x4, 0x8000, 0x3ff, 0x5, 0x100000000, 0x7, 0x5, 0x80000000, 0x3, 0x1, 0x8, 0x2, 0x24, 0x9, 0x1f, 0x4, 0x5, 0x8, 0x6, 0x7, 0x8000000000000, 0x9, 0x0, 0xf7, 0x7, 0x3, 0x4, 0xffff, 0x401, 0x5, 0x8, 0x64d, 0x9, 0x7f, 0x5, 0x8, 0x3f, 0x1ff, 0xb54, 0x9, 0x8, 0x8, 0x100, 0x8000, 0x101, 0x6, 0xebb, 0x0, 0x4, 0x5, 0x8, 0x3, 0x7fff, 0x6, 0x10000, 0x100000001, 0x100, 0x4, 0x1, 0xd8c, 0x8000, 0x10000, 0x7fffffff, 0x101, 0x100, 0x61, 0x7f, 0x0, 0x6, 0x100, 0x9, 0x3, 0xd1, 0x3, 0x6, 0x1ff, 0x2, 0x6f1, 0x5, 0x61a2, 0x3, 0x9, 0x1d, 0x7, 0xf6, 0x8001, 0xff, 0x1, 0x2, 0x6, 0x7, 0xdec4, 0x5, 0x2, 0xffff, 0x100000000, 0x8, 0xffff, 0x52, 0x2, 0x6, 0xa6a, 0x7, 0x7, 0x6d87, 0x9, 0x1, 0x7]}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r6, 0x100, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, r6, 0x200, 0x70bd28, 0x25dfdbfe, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044881}, 0x800) getrusage(0x0, &(0x7f0000000840)) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4080, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, r4, &(0x7f0000000040)={0xffffffffffffffff, r7, 0xfffffffd}) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:12:52 executing program 3: socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0xffffffb1) 20:12:52 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r3, &(0x7f0000000900), 0x2, 0x0) setsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000000)=0x204, 0x3) 20:12:53 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) 20:12:53 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) shmdt(0x0) 20:12:53 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:12:53 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) socketpair(0x2a, 0xa, 0x92d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000340), 0x4) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000040)) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000080)=0x4) 20:12:53 executing program 3: socket$can_j1939(0x1d, 0x2, 0x7) socketpair(0x4, 0x6, 0x5, &(0x7f0000000080)={0xffffffffffffffff}) socketpair(0x1d, 0xa, 0xb864a8d7, &(0x7f00000007c0)) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f0000000140)={0x9, 0x4, 0xffff, 0x7, '\x00', 0x3f}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getpeername$l2tp(r1, &(0x7f00000000c0)={0x2, 0x0, @private}, &(0x7f0000000100)=0x10) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x20000, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r3, 0x100, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000002c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa0, r3, 0x800, 0x70bd25, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000801}, 0x4c045) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440)='devlink\x00') r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r5, &(0x7f0000000900), 0x2, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640)='devlink\x00') sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r5, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x64, r6, 0x2, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5b}, {0x6, 0x16, 0x8000}, {0x5}, {0x6, 0x11, 0xef}, {0x8, 0xb, 0x1}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xcc, r4, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x8000}, {0x8, 0x13, 0x9}, {0x5, 0x14, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x105}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x3}, {0x5, 0x14, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x7}, {0x8}, {0x5, 0x14, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x20000084) 20:12:53 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000340), 0x4) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x24400, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000040)={0x805, 0x4c52}) 20:12:53 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) 20:12:53 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000280)={0x8, 0x3, 0x78e, 0x1f, &(0x7f00000001c0)=[{}, {}, {}]}) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10d0}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="f00000001000000226bd7000fbdbdf2573657169762861656769733132386c2d6165736e692900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecf94d9d000000000000000000000000000000000000000000000004000000140000000000000000000008000100030000000800010002000000a2212a094e577ad903c61c"], 0xf0}, 0x1, 0x0, 0x0, 0x20044000}, 0x40010) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000500)={0x0, 0x6732, 0x401, &(0x7f00000004c0)=0x40}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x1000) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000440)={0x3b, 0x5, 0x6, 0x8001, &(0x7f0000000300)=[{}, {}, {}, {}, {}]}) shmdt(0x0) 20:12:53 executing program 0: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:12:53 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) socketpair(0x2a, 0xa, 0x92d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000340), 0x4) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000040)) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000080)=0x4) 20:12:53 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 20:12:53 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000000), 0x4) 20:12:53 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) 20:12:53 executing program 0: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:12:53 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) socketpair(0x2a, 0xa, 0x92d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000340), 0x4) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000040)) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000080)=0x4) 20:12:53 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) shmdt(0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x80000008}) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000140)) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x101082, 0x0) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000100)) getegid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)) 20:12:53 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000340), 0x4) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000000)=0x4) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x40200, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) 20:12:53 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f00000003c0), 0x2, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000054}, 0x40040) waitid$P_PIDFD(0x3, r3, &(0x7f0000000900), 0x2, 0x0) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:12:53 executing program 0: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:12:53 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}) 20:12:53 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) socketpair(0x2a, 0xa, 0x92d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000340), 0x4) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000040)) 20:12:53 executing program 3: socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x2, 0x0) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 20:12:53 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ff9000/0x4000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x6000) shmdt(0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000180)=0x12000) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x8, 0x0) waitid(0x0, 0x0, &(0x7f0000000040), 0x40000000, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000000)) 20:12:53 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x800, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x20800, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000340), 0x4) 20:12:53 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:12:53 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) socketpair(0x2a, 0xa, 0x92d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000340), 0x4) 20:12:53 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 20:12:53 executing program 3: socket$can_j1939(0x1d, 0x2, 0x7) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000000)) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000380)=0x1ff) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xc000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f00000003c0), 0x1, &(0x7f0000000440)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x180, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0xffff}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0x9000}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x9}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x809}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1ff}, {0x6, 0x11, 0x5e9}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x40}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x9}}]}, 0x180}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000040)) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ubi_ctrl\x00', 0x10000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000580)={{0x0, 0x4, 0x7, 0x9, 'syz1\x00', 0x1}, 0x3, 0x100, 0x9, 0xffffffffffffffff, 0x7, 0x7, 'syz1\x00', &(0x7f0000000540)=['netdevsim', ':\\/@]/$%*[1\x00', '\x00', './\x00', '\\#$@+-\x00', '\'$\x00', '&\x00'], 0x25, [], [0x7, 0x0, 0x1, 0x1ff]}) 20:12:53 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x2000, 0x0) write$dsp(r1, &(0x7f0000000980)="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"/772, 0x121) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000000)) 20:12:54 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xd305f12d0b602a0a}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0xf4, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}, {@nsim={{0x0, 0x1, 'netdevsim\x00'}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}, {@pci={{0x0, 0x1, 'pci\x00'}, {0x0, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}, {@nsim={{0x0, 0x1, 'netdevsim\x00'}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}, {@nsim={{0x0, 0x1, 'netdevsim\x00'}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40005}, 0x4048001) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000340), 0x4) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r1}) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000240)) 20:12:54 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:12:54 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 20:12:54 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x101000, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f00000001c0)) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010025bd7000fcdbdf25250000000e000100741ef516603b1bdbaa4223c664657673696d0000000f0002006e657464657673696d3000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:12:54 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) socketpair(0x2a, 0xa, 0x92d, &(0x7f0000000000)) 20:12:54 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000002000/0x2000)=nil, 0x3000) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x1010, 0xffffffffffffffff, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000000)=0x100000000) shmdt(0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f00000000c0)) shmget$private(0x0, 0x1000, 0x78001280, &(0x7f0000ffc000/0x1000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x63b58fa3ba04075f, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x4, 0x7, 0x1, 0x80000000}, {0x0, 0x4, 0x1, 0x5}, {0x81, 0x2, 0x6, 0x2}, {0x896, 0x5a, 0x3, 0x4}]}) 20:12:54 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000340)=0x3, 0x4) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) 20:12:54 executing program 2: socketpair(0x2a, 0xa, 0x92d, &(0x7f0000000000)) 20:12:54 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:12:54 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) 20:12:54 executing program 3: socket$can_j1939(0x1d, 0x2, 0x7) 20:12:54 executing program 2: socketpair(0x0, 0xa, 0x92d, &(0x7f0000000000)) 20:12:54 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x1000) shmdt(0x0) 20:12:54 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) 20:12:54 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) 20:12:54 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000340)=0x2, 0x4) r2 = epoll_create1(0x80000) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x7fff, &(0x7f0000000080)={[0x1]}, 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000140)={r3, 0x0, r0, 0xff}) 20:12:54 executing program 1: syz_io_uring_setup(0x11f4, &(0x7f0000000000)={0x0, 0x4117, 0x8, 0x1, 0x3ca}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) 20:12:54 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair(0x22, 0x0, 0x101, &(0x7f0000000000)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x75b040, 0x0) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000040)={0xfd, 0x3}) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:12:54 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) 20:12:54 executing program 2: socketpair(0x0, 0xa, 0x92d, &(0x7f0000000000)) 20:12:54 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) 20:12:54 executing program 1: shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x6000) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x20000, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r2, 0x4, 0x70bd28, 0x25dfd9fb, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x806) shmdt(0x0) 20:12:54 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) 20:12:54 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000000)={0x4, 0x200, 0x1}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x610083, 0x0) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000040)) 20:12:54 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) 20:12:54 executing program 2: socketpair(0x0, 0xa, 0x92d, &(0x7f0000000000)) 20:12:54 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) shmdt(0x0) 20:12:55 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000340)=0x2, 0x4) 20:12:55 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:12:55 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x34) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r2, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x0, 0x1, 'pci\x00'}, {0x0, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4001}, 0x40) bind$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, 0x10) 20:12:55 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) 20:12:55 executing program 1: shmdt(0x0) shmdt(0x0) 20:12:55 executing program 2: socketpair(0x2a, 0x0, 0x92d, &(0x7f0000000000)) 20:12:55 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:12:55 executing program 2: socketpair(0x2a, 0x0, 0x0, &(0x7f0000000000)) 20:12:55 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) epoll_create(0x2) 20:12:55 executing program 3: socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x2, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x4b0100, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0xfffffffffffffeaa) 20:12:55 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}) 20:12:55 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x4, 0x0) r1 = epoll_create1(0x80000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x80000000}) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000000), 0x4) 20:12:55 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:12:55 executing program 1: ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000000)=0x1) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x6000) shmdt(0x0) 20:12:55 executing program 2: socketpair(0x2a, 0x0, 0x0, 0x0) 20:12:55 executing program 3: socket$can_j1939(0x1d, 0x2, 0x7) socketpair(0x4, 0x4, 0x8, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x101) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 20:12:55 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000000)=0x2) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000340), 0x4) 20:12:55 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 20:12:55 executing program 0: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:12:55 executing program 2: socketpair(0x2a, 0x0, 0x0, 0x0) 20:12:55 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x0, 0xffffffffffffffff, 0x7}) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000100)={{0x5, 0x0, 0x1, 0x3f, '\x00', 0x8}, 0x0, 0x10000000, 0x64b, r0, 0x6, 0x1, 'syz0\x00', &(0x7f00000000c0)=['.\\{:-\x00', '.*\xfe\'@/%%\x00', '\\%!+#P)#!,-]!,$):%{+\x00', '\x00', ']/$-\\\x00', '{\x00'], 0x2d, [], [0x81, 0x80, 0xfff, 0x5]}) 20:12:55 executing program 3: socket$can_j1939(0x1d, 0x2, 0x7) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x10840, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000200), 0x1, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000040)=0x9) ioctl$BLKPG(r1, 0x1269, &(0x7f00000001c0)={0x5763, 0x0, 0x60, &(0x7f0000000140)="ff39a011a029b307cf910d9696aeb642cae77988c3e22a14aa26f0ac193fbb590f04fed72669f1aff5863d3c0153c8e489f714cc602e52fbd0acc52c1f42d52ea0e0f32576f7a972c505e2471060bf609c1a84af2aa2bf2cac9fba433479f2fb"}) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000100)) 20:12:55 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0xc80, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r1, 0x10, &(0x7f00000000c0)={&(0x7f0000000080)=""/44, 0x2c}}, 0x10) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000040)=0x9, 0x4) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000140), 0x4) 20:12:56 executing program 0: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) 20:12:56 executing program 2: socketpair(0x2a, 0x0, 0x0, 0x0) 20:12:56 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}) 20:12:56 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r0) shmdt(r0) 20:12:56 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_dccp(0x2, 0x6, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0x9) 20:12:56 executing program 0: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) 20:12:56 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000340), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r1, 0x8004500f, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x200000, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000080)) 20:12:56 executing program 2: ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x0, 0xffffffffffffffff, 0x7}) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000100)={{0x5, 0x0, 0x1, 0x3f, '\x00', 0x8}, 0x0, 0x10000000, 0x64b, r0, 0x6, 0x1, 'syz0\x00', &(0x7f00000000c0)=['.\\{:-\x00', '.*\xfe\'@/%%\x00', '\\%!+#P)#!,-]!,$):%{+\x00', '\x00', ']/$-\\\x00', '{\x00'], 0x2d, [], [0x81, 0x80, 0xfff, 0x5]}) 20:12:56 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 20:12:56 executing program 0: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) 20:12:56 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x110, r0, 0x10000000) waitid$P_PIDFD(0x3, r0, 0x0, 0x2, &(0x7f0000000040)) shmdt(0x0) 20:12:56 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 20:12:56 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x2800) getgid() getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) getsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) 20:12:56 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0xffff32da}, 0x27) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x5}, 0x2) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000040)=0x1, 0x4) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000100)={0x1, 0x41}, 0x2) 20:12:56 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 20:12:56 executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x4, 0x0) r1 = epoll_create1(0x80000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x80000000}) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000000), 0x4) 20:12:56 executing program 2: socketpair(0x0, 0xa, 0x92d, &(0x7f0000000000)) 20:12:56 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) r0 = gettid() r1 = gettid() getpgid(r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000040)={0x283, 0x1}) r3 = shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x1000)=nil, 0x2000) shmdt(r3) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x80000000, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x8}) 20:12:56 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000040)=0x1, 0x4) 20:12:56 executing program 3: socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r3, &(0x7f0000000900), 0x2, 0x0) getsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) 20:12:56 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 20:12:56 executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x4, 0x0) r1 = epoll_create1(0x80000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x80000000}) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000000), 0x4) 20:12:56 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000340)=0x6, 0xea4b7137e87fff06) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x3, 0x3, 0x2, 0x80000000, 0xff, 0x0, 0x80, 0x6}, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100)={r1, r2+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:12:56 executing program 1: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x5000) shmdt(0x0) shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ffd000/0x2000)=nil) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0xd80, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x200000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x110, r0, 0x0) 20:12:56 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0xffff32da}, 0x27) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x5}, 0x2) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000040)=0x1, 0x4) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000100)={0x1, 0x41}, 0x2) 20:12:56 executing program 3: ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0xffffffff) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000100)={0x7f, 0x9, 0x0, 0x14, [], [], [], 0x1, 0xfffffffc, 0x6, 0x8, "d61a22e4e214fcbf0cf217b9de4e56b7"}) 20:12:56 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) 20:12:56 executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x4, 0x0) r1 = epoll_create1(0x80000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x80000000}) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000000), 0x4) 20:12:56 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x6) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x8000000) 20:12:56 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000340)=0x6, 0xea4b7137e87fff06) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x3, 0x3, 0x2, 0x80000000, 0xff, 0x0, 0x80, 0x6}, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100)={r1, r2+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:12:56 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0xffff32da}, 0x27) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x5}, 0x2) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000040)=0x1, 0x4) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000100)={0x1, 0x41}, 0x2) 20:12:56 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000000)=0x38c) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:12:57 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) 20:12:57 executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x4, 0x0) r1 = epoll_create1(0x80000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x80000000}) 20:12:57 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0xffff32da}, 0x27) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x5}, 0x2) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000040)=0x1, 0x4) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000100)={0x1, 0x41}, 0x2) 20:12:57 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000340)=0x6, 0xea4b7137e87fff06) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x3, 0x3, 0x2, 0x80000000, 0xff, 0x0, 0x80, 0x6}, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100)={r1, r2+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:12:57 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) shmdt(0x0) 20:12:57 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) 20:12:57 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0xffffffffffffffda) getrusage(0x0, &(0x7f0000000280)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f00000003c0)=0x5, 0x4) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48804}, 0x10040881) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x143402, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000380)={0xfe0, 0xbaf, 0x400, 0x9}) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f0000000000)) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x80001, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r3, &(0x7f0000000900), 0x2, 0x0) setsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000100)=0x20007, 0x1) 20:12:57 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0xffff32da}, 0x27) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x5}, 0x2) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000040)=0x1, 0x4) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) 20:12:57 executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x4, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x80000000}) 20:12:57 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) r0 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x3000)=nil, 0x1000) shmdt(r0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x20000, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0)='devlink\x00') r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r1, 0x4, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) r4 = gettid() getpgid(r4) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r5, &(0x7f0000000900), 0x2, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r6, &(0x7f0000000900), 0x2, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="c2d678fb3aa184b002fadef786feb731e1a8e9cf2f59448888cac7d3c26056bb4079cb9250ecbdebee7c279ef0bd723be14aee8f0cb3d939c2f08f0161fee8ea3a5e615bd1ba66a90f49281f06b774ba5108db35e92f68d5998b6c7a4bb7c66fb1c5dc0f1b420f9700faf9b46bf72fa539160ab673aa8ceebf7cea5689cae26d10d00916d7634f7a8f9eff75b3536d491d02684804b1a354cc048aee8ac054193a81eb291d10ea1e46d382338e", @ANYRES16=r1, @ANYBLOB="080028bd7000fbdbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32=r3, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008c0004000000080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32=r0, @ANYBLOB="78e7f15bc15bfcb63b816cf45670dca30b0ac9dccfac21e2d0a9ef402cf38977ceff8b9baf758b98ff292d72263f30516e4cf3479d70c9e32b16e67e707372a26e59c7077417a2f108351e6953c9ea3cc56b36236f081ca9ed1d52ff45f4e9d7ab9f6a18b79b6ff77b1c9a183d121bf43f49e7ca70449731d1bda25bf857e54e75c4c5b3da8e314a400a7d162149918a3c4690314d1746eeeeeb6da6044ad0439346476111ec644338e26a20140b9f04e84efd89"], 0xc8}, 0x1, 0x0, 0x0, 0xc095}, 0x4000080) 20:12:57 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000340)=0x6, 0xea4b7137e87fff06) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x3, 0x3, 0x2, 0x80000000, 0xff, 0x0, 0x80, 0x6}, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100)={r1, r2+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:12:57 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) 20:12:57 executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x4, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x80000000}) 20:12:57 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00') getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:12:57 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0xffff32da}, 0x27) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x5}, 0x2) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000040)=0x1, 0x4) 20:12:57 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000340)=0x6, 0xea4b7137e87fff06) pselect6(0x40, &(0x7f0000000000)={0x3, 0x3, 0x2, 0x80000000, 0xff, 0x0, 0x80, 0x6}, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:12:57 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) 20:12:57 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) syz_io_uring_setup(0xe68, &(0x7f0000000000)={0x0, 0x6f04, 0x1, 0x1, 0x1df}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) shmdt(0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000100)) 20:12:57 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x1, r1, 0x0, 0x80000}) 20:12:57 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0xffff32da}, 0x27) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x2, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x5}, 0x2) 20:12:57 executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x4, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x80000000}) 20:12:57 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000340)=0x6, 0xea4b7137e87fff06) pselect6(0x40, &(0x7f0000000000)={0x3, 0x3, 0x2, 0x80000000, 0xff, 0x0, 0x80, 0x6}, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:12:57 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x2000)=nil, 0x2000) shmdt(0x0) 20:12:57 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}) 20:12:57 executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x4, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)={0x80000000}) 20:12:57 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x20000, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r3, 0x100, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r3, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44044}, 0x80d0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r4, &(0x7f0000000900), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000100)=0xfff) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:12:57 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000340)=0x6, 0xea4b7137e87fff06) pselect6(0x40, &(0x7f0000000000)={0x3, 0x3, 0x2, 0x80000000, 0xff, 0x0, 0x80, 0x6}, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:12:57 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0xffff32da}, 0x27) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x2, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 20:12:57 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x1c4, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20040080}, 0x4008004) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x8000000) 20:12:57 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 20:12:57 executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x4, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)={0x80000000}) 20:12:58 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0xffff32da}, 0x27) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x2, 0x0) 20:12:58 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x101200, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x148, 0x0, 0x400, 0x70bd2d, 0x25dfdbfa, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x3}, {0x5}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xffffc1e4}, {0x6, 0x16, 0xb6fb}, {0x5, 0x12, 0x20}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x6}, {0x5}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x7}, {0x5}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4000850}, 0x64008004) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ef0}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_macvtap\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048080}, 0x20008040) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000100)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000240)) waitid$P_PIDFD(0x3, r3, &(0x7f0000000900), 0x2, 0x0) setsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000000)=0x2, 0x4) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000180), &(0x7f0000000280)=0x4) 20:12:58 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x3, 0x3, 0x2, 0x80000000, 0xff, 0x0, 0x80, 0x6}, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:12:58 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}) 20:12:58 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x3000) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000040)={0x6, 0x3}) shmdt(r1) shmdt(0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000080)) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000000)) 20:12:58 executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x4, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)={0x80000000}) 20:12:58 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0xffff32da}, 0x27) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 20:12:58 executing program 3: syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f0000000000)=0x4) 20:12:58 executing program 5: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x3, 0x3, 0x2, 0x80000000, 0xff, 0x0, 0x80, 0x6}, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:12:58 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 20:12:58 executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = epoll_create1(0x80000) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x80000000}) 20:12:58 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x0) 20:12:58 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0xffff32da}, 0x27) 20:12:58 executing program 5: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x3, 0x3, 0x2, 0x80000000, 0xff, 0x0, 0x80, 0x6}, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:12:58 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40002, 0x0) write$dsp(r1, &(0x7f0000000040)='J', 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x14) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f0000000000)=0x4) 20:12:58 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 20:12:58 executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) r0 = epoll_create1(0x80000) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x80000000}) 20:12:58 executing program 1: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x3000) shmdt(r0) 20:12:58 executing program 2: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0xffff32da}, 0x27) 20:12:58 executing program 5: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x3, 0x3, 0x2, 0x80000000, 0xff, 0x0, 0x80, 0x6}, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:12:58 executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) r0 = epoll_create1(0x80000) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x80000000}) 20:12:58 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r0) shmdt(r0) 20:12:58 executing program 2: bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) 20:12:58 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 20:12:58 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x3, 0x3, 0x2, 0x80000000, 0xff, 0x0, 0x80, 0x6}, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:12:58 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x2, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x6}) shmdt(0x0) 20:12:59 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$SNDCTL_DSP_GETBLKSIZE(0xffffffffffffffff, 0xc0045004, &(0x7f0000000000)) 20:12:59 executing program 2: bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) 20:12:59 executing program 0: r0 = epoll_create1(0x80000) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x80000000}) 20:12:59 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 20:12:59 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x3, 0x3, 0x2, 0x80000000, 0xff, 0x0, 0x80, 0x6}, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:12:59 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000040)) 20:12:59 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x3, 0x3, 0x2, 0x80000000, 0xff, 0x0, 0x80, 0x6}, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:12:59 executing program 2: bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) 20:12:59 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 20:12:59 executing program 0: r0 = epoll_create1(0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x80000000}) 20:12:59 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) shmdt(0x0) shmdt(0x0) 20:12:59 executing program 3: socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x2, 0x0) getrusage(0x0, &(0x7f00000000c0)) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) 20:12:59 executing program 2: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080), 0x27) 20:12:59 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x0, 0x0, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:12:59 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 20:12:59 executing program 0: epoll_create1(0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x80000000}) 20:12:59 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:12:59 executing program 1: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) shmdt(0x0) 20:12:59 executing program 2: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080), 0x27) 20:12:59 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) shmdt(0x0) 20:12:59 executing program 0: epoll_create1(0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x80000000}) 20:12:59 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 20:12:59 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f0000000000)=0x4) 20:12:59 executing program 2: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080), 0x27) 20:12:59 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x42001, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000100)=0x1) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) 20:13:00 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x0, 0x0, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:00 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 20:13:00 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040800}, 0x4008004) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) 20:13:00 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) 20:13:00 executing program 0: epoll_create1(0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x80000000}) 20:13:00 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000000)=0x401) 20:13:00 executing program 0: r0 = epoll_create1(0x0) socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x80000000}) 20:13:00 executing program 2: epoll_create1(0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x80000000}) 20:13:00 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) shmdt(0x0) 20:13:00 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) 20:13:00 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000100)='threaded\x00', 0x9) 20:13:00 executing program 0: r0 = epoll_create1(0x0) socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x80000000}) 20:13:01 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x0, 0x0, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:01 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r0) shmdt(r0) 20:13:01 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000008, 0x8010, r0, 0x8000000) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000000)) getrusage(0xffffffffffffffff, &(0x7f00000000c0)) 20:13:01 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) 20:13:01 executing program 3: socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f00000000c0), 0x4, 0x0) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f0000000000)=0x8b) 20:13:01 executing program 0: r0 = epoll_create1(0x0) socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x80000000}) 20:13:01 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) r0 = shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x3000) shmdt(r0) shmdt(r0) 20:13:01 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 20:13:01 executing program 0: r0 = epoll_create1(0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) 20:13:01 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) 20:13:01 executing program 3: ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, &(0x7f0000000240)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x40400, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={r2, 0x0, 0xffffffffffffffff, 0x7}) ioctl$PPPIOCDISCONN(r0, 0x7439) r3 = socket$can_j1939(0x1d, 0x2, 0x7) pipe2(&(0x7f0000000180), 0x84000) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000200)={0x0, 0x86, 0x80000000, &(0x7f00000001c0)=0x7}) getsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) getsockopt$inet_udp_int(r5, 0x11, 0xa, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 20:13:01 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) r0 = epoll_create1(0x80000) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x80000000}) 20:13:02 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x0, 0x3, 0x2, 0x80000000, 0xff, 0x0, 0x80, 0x6}, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:02 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}) 20:13:02 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40800, 0x0) 20:13:02 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:13:02 executing program 0: r0 = epoll_create1(0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) 20:13:02 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x3, 0x3, 0x2, 0x80000000, 0xff, 0x0, 0x80, 0x6}, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:02 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f00000001c0)={0x9, 0x8, 0x1}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x201c4100}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x810) 20:13:02 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x1000) shmdt(0x0) 20:13:02 executing program 0: r0 = epoll_create1(0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) 20:13:02 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 20:13:02 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x101200, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x148, 0x0, 0x400, 0x70bd2d, 0x25dfdbfa, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x3}, {0x5}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xffffc1e4}, {0x6, 0x16, 0xb6fb}, {0x5, 0x12, 0x20}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x6}, {0x5}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x7}, {0x5}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4000850}, 0x64008004) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6ef0}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_macvtap\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048080}, 0x20008040) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000100)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000240)) waitid$P_PIDFD(0x3, r3, &(0x7f0000000900), 0x2, 0x0) setsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000000)=0x2, 0x4) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000180), &(0x7f0000000280)=0x4) 20:13:02 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x0, 0x3, 0x2, 0x80000000, 0xff, 0x0, 0x80, 0x6}, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:02 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x30, r0, 0x0) 20:13:02 executing program 3: kexec_load(0x2, 0x0, &(0x7f0000000140), 0x20000) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:13:02 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x0, 0x3, 0x2, 0x80000000, 0xff, 0x0, 0x80, 0x6}, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:02 executing program 0: r0 = epoll_create1(0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) 20:13:02 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 20:13:02 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) 20:13:02 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x30, r0, 0x0) 20:13:02 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000080), 0x2) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}]}, 0x20}}, 0x24044800) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000000)=0x4) 20:13:02 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x3, 0x0, 0x2, 0x80000000, 0xff, 0x0, 0x80, 0x6}, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:02 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) 20:13:02 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}) 20:13:02 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x80000000, 0xff, 0x0, 0x80, 0x6}, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:02 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000340)=0x6, 0xea4b7137e87fff06) pselect6(0x40, &(0x7f0000000000)={0x3, 0x3, 0x2, 0x80000000, 0xff, 0x0, 0x80, 0x6}, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:02 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x28e2c0, 0x0) shmdt(r0) shmdt(r0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000fff000/0x1000)=nil, 0x1000) 20:13:02 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x81000) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80800) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f00000001c0)=0x6, 0x4) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:13:03 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) 20:13:03 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0xff, 0x0, 0x80, 0x6}, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:03 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) 20:13:03 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000340)=0x6, 0xea4b7137e87fff06) pselect6(0x40, &(0x7f0000000000)={0x3, 0x3, 0x2, 0x80000000, 0xff, 0x0, 0x80, 0x6}, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:03 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ff9000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) shmdt(r1) 20:13:03 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000000)={0x1, 0x3, 0x1ff, 0x1ff, 'syz0\x00', 0x1ff}) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:13:03 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) 20:13:03 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x6}, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:03 executing program 1: shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x6000) r0 = shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0) shmdt(r0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ff3000/0x1000)=nil, 0x0) shmdt(0x0) shmat(0xffffffffffffffff, &(0x7f0000ff3000/0xd000)=nil, 0x6000) shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffb000/0x2000)=nil) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0x3000)=nil, 0x3000, 0x1000000, 0x110, r2, 0x10000000) 20:13:03 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000340)=0x6, 0xea4b7137e87fff06) pselect6(0x40, &(0x7f0000000000)={0x3, 0x3, 0x2, 0x80000000, 0xff, 0x0, 0x80, 0x6}, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:03 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x101000, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x20000, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="67f096a3f5a1d3b7c9a0a5000000", @ANYRES16=r3, @ANYBLOB="000127bd7000fddbdf25420000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500830000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x168, r3, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}]}, 0x168}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004084) 20:13:03 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x28e2c0, 0x0) shmdt(r0) shmdt(r0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000fff000/0x1000)=nil, 0x1000) 20:13:03 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:03 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) 20:13:03 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) pselect6(0x40, &(0x7f0000000000)={0x3, 0x3, 0x2, 0x80000000, 0xff, 0x0, 0x80, 0x6}, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:03 executing program 1: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) shmdt(r0) 20:13:03 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x28e2c0, 0x0) shmdt(r0) shmdt(r0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000fff000/0x1000)=nil, 0x1000) 20:13:03 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x3}, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:03 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xf8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80) 20:13:03 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) 20:13:03 executing program 2: pselect6(0x40, &(0x7f0000000000)={0x3, 0x3, 0x2, 0x80000000, 0xff, 0x0, 0x80, 0x6}, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:03 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x3}, 0x0, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:03 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}) 20:13:03 executing program 1: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) shmdt(r0) 20:13:03 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x28e2c0, 0x0) shmdt(r0) shmdt(r0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000fff000/0x1000)=nil, 0x1000) 20:13:03 executing program 2: pselect6(0x40, &(0x7f0000000000)={0x3, 0x3, 0x2, 0x80000000, 0xff, 0x0, 0x80, 0x6}, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:03 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x210020}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="00034000000000000ce6c96a11bd2fcf0196f7c3e42cc4cd0000c899c302454f07000002542e192d209bed6c801c51b6e36e4d507e6cc37ef3ac8a18df29a066916ec491e91963df5fecfa0cb3ab66b04d8049e4152365846d340f3f9716b5491f1adb98bc7650cd6c0780399d9cf416f6a0defdc0fbf2b9d42aecf833f0b576a9f9ede9eb2cb03b0cb1b178a553406120fbbf4a7296047c7b883086d7c4265cc9fdc70802c7327c167b983103b0ba0983d0d5b02ee96914c7d7e97216799ae31f1721"], 0x14}, 0x1, 0x0, 0x0, 0x8004001}, 0x40) r2 = epoll_create(0x2) epoll_wait(r2, &(0x7f00000001c0)=[{}], 0x1, 0x2b7) 20:13:03 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x3}, 0x0, 0x0, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:03 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x3}, 0x0, 0x0, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:03 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 20:13:03 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x28e2c0, 0x0) shmdt(r0) shmdt(r0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000fff000/0x1000)=nil, 0x1000) 20:13:04 executing program 2: pselect6(0x40, &(0x7f0000000000)={0x3, 0x3, 0x2, 0x80000000, 0xff, 0x0, 0x80, 0x6}, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:04 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x1000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r2 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ff4000/0x3000)=nil) shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x0) shmat(r2, &(0x7f0000fec000/0x14000)=nil, 0x6000) shmdt(0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000040)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r3, &(0x7f0000000900), 0x2, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000080)) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, 0x1}, 0x10) shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffd000/0x2000)=nil) 20:13:04 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x3}, 0x0, 0x0, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:04 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}) 20:13:04 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x28e2c0, 0x0) shmdt(r0) shmdt(r0) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000) 20:13:04 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x3}, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:04 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) pselect6(0x0, 0x0, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:04 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x1a4, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x34, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15285539}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c9c78b4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5dee093a}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a367a46}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0x13c, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xad}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x227b27eb}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e062043}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22e6dd36}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x16}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55b905b0}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x537d0a08}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5114e48b}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4fac26b4}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55bb3e68}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dd946ae}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cb49bb1}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x728b1d2f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x74}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d47ce09}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x10}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x75e45ff0}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a07cb54}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x301aaa04}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x40}, 0x8080) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r3, &(0x7f0000000900), 0x2, 0x0) waitid$P_PIDFD(0x3, r3, &(0x7f0000000900), 0xd2e8806198c0d820, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000000)) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r4, &(0x7f0000000900), 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x10010, r4, 0x10000000) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, &(0x7f0000000040)) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r5, &(0x7f0000000900), 0x2, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r5, 0xc0045004, &(0x7f0000000100)) 20:13:04 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 20:13:04 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x1000) shmdt(0x0) 20:13:04 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) pselect6(0x0, 0x0, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:04 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x28e2c0, 0x0) shmdt(r0) shmdt(r0) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000) 20:13:04 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x3}, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:04 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) pselect6(0x0, 0x0, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:04 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x3776, 0x80000) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000180)=0x5) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000040)={0x2, 0x8000, 0x1}) shmdt(0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x12, 0xffffffffffffffff, 0x8000000) 20:13:04 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x28e2c0, 0x0) shmdt(r0) shmdt(r0) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000) 20:13:04 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x3}, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:04 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 20:13:04 executing program 3: socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x8080, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x4200, 0x0) socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:13:04 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) pselect6(0x40, &(0x7f0000000000)={0x0, 0x3, 0x2, 0x80000000, 0xff, 0x0, 0x80, 0x6}, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:04 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x3}, 0x0, &(0x7f0000000080)={0x8, 0x0, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:04 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 20:13:05 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x28e2c0, 0x0) shmdt(r0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000fff000/0x1000)=nil, 0x1000) 20:13:05 executing program 1: ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000000)=0xffff) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) r0 = shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) shmdt(r0) shmdt(0x0) 20:13:05 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = gettid() r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000240)={0x2, 0x4, 0x401, 0x1, 'syz0\x00', 0x8}) getpgid(r1) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000300)={{0x7, 0x2, 0xfffffffe, 0x9, 'syz0\x00', 0x10001}, 0x1, 0x100, 0xd, r1, 0x7, 0x200, 'syz0\x00', &(0x7f0000000500)=['\x00', '/sys/\x0fxs\xe5\xe8\xa4q\x81H~o\x847W\x02\xf1kernel/\xce\x05bug/bi\x00\x00er/sua', '\xfe\x11\x87\xcfebug/\xa3\x8aW]\t\xf8\x00\x00\xb1\xf0l\xa8A\xdf/\rbinder', '/sys/kernel/debug/binder/stats\x00', '\xbb\xef:w\x90X\xfeG\xb7\xc9\xf2M\xc5\xab?\xf5yZb\xbb[N\xb8\xf4<\xe2#\x1a%b\xa8NqI\xec]\xe1\xd7\xed\x85\xf0 \x02\x1e\x97\xb6\xd1D\xbdf\xad\xd3\x9f\xe5B\xc3\x84\x97\xe7q\xcem\'(\v\x84\x10\xc7\x00\xa0\x13P\x92~\x97\x83\xa1\x9d\xe2|\xbc\xfc\xde\x9e\x10\xb8\xd64\x9d\x99\xa9\xe1z\x02b\x10cf\x8f>vm#\xe8\xa9\xa2\x15\x11\xea\xb2\xfbr]Pv\xe9\x86 J\xccV\xe9u<\x90\x15\xa128b\x95V\\\t:\x862\x95\x94\x80{\xdcSI\xde\xd6\"\xca\xcag\xbb\xe6\x9a\xfa\xe0\xef\x96>zD\xfe\x94\x83\xfe\xaa\xb4vSr\x02.\x00O\x83\xf2W&9#Yp\xa1\xde`\x90y\xdbu\x88r\xac\xd8kCy58\'\x84\'?c\xafC=', '/sys/kernel/debf!\xf5V:\xffr/stats\x00', '/sys/kernel/debug/binder/stats\x00'], 0x174, [], [0x200, 0x0, 0xa281]}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r4 = syz_io_uring_setup(0x523e, &(0x7f0000000000)={0x0, 0x7bfd, 0x8, 0x2, 0xf3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, &(0x7f00000001c0)=0xdbfb) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000004, 0x10, r4, 0x10000000) 20:13:05 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x3}, 0x0, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:05 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) pselect6(0x40, &(0x7f0000000000)={0x0, 0x3, 0x2, 0x80000000, 0xff, 0x0, 0x80, 0x6}, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:05 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) 20:13:05 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x28e2c0, 0x0) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x1000) 20:13:05 executing program 1: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r0) 20:13:05 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f00000001c0)) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000100), 0x2, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0xc0, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000000380)={&(0x7f0000000180), 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x180, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xff}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0x3}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x9}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x2}}, {@nsim={{0x0, 0x1, 'netdevsim\x00'}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x11, 0xd}}, {@nsim={{0xfffffe58, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2c}, {0x6, 0x11, 0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x1}}]}, 0x180}, 0x1, 0x0, 0x0, 0x2010}, 0x24044801) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000000)=0x8003088) 20:13:05 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) pselect6(0x40, &(0x7f0000000000)={0x0, 0x3, 0x2, 0x80000000, 0xff, 0x0, 0x80, 0x6}, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:05 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x3}, 0x0, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:05 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) 20:13:05 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x0) shmdt(0x0) shmat(0xffffffffffffffff, &(0x7f0000fff000/0x1000)=nil, 0x6000) 20:13:05 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x28e2c0, 0x0) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x1000) 20:13:05 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) pselect6(0x40, &(0x7f0000000000)={0x3, 0x0, 0x2, 0x80000000, 0xff, 0x0, 0x80, 0x6}, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:05 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f0000000040)=0x4) 20:13:05 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x3}, 0x0, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, 0xf}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:05 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) 20:13:05 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) shmdt(0x0) 20:13:05 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) pselect6(0x40, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x80000000, 0xff, 0x0, 0x80, 0x6}, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:05 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x28e2c0, 0x0) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x1000) 20:13:05 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, &(0x7f0000000100)}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000100)={0x4, 0x7}) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:13:05 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) 20:13:05 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x3}, 0x0, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xf}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:05 executing program 1: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000000)) shmdt(0x0) shmdt(r0) 20:13:05 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000fff000/0x1000)=nil, 0x1000) 20:13:05 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) pselect6(0x40, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0xff, 0x0, 0x80, 0x6}, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:05 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) io_uring_setup(0x713c, &(0x7f0000000000)={0x0, 0x1aff, 0x4, 0x3, 0x32d}) 20:13:05 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x3}, 0x0, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:05 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) 20:13:05 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x28e2c0, 0x0) shmdt(r0) shmdt(r0) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000) 20:13:05 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) shmdt(0x0) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x1000) 20:13:05 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) pselect6(0x40, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x6}, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:06 executing program 3: socket$can_j1939(0x1d, 0x2, 0x7) socketpair(0x2, 0x800, 0x3c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000000)=0x4) socketpair(0x15, 0x1, 0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x50) 20:13:06 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x3}, 0x0, &(0x7f0000000080)={0x8}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:06 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) shmdt(0x0) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x1000) 20:13:06 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}) 20:13:06 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) shmdt(0x0) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x1000) 20:13:06 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) pselect6(0x40, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:06 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f00000000c0)) pselect6(0x40, &(0x7f0000000000)={0x3}, 0x0, &(0x7f0000000080)={0x8}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:06 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000fff000/0x1000)=nil, 0x1000) 20:13:06 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 20:13:06 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) shmdt(0x0) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x1000) 20:13:06 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) pselect6(0x40, &(0x7f0000000000)={0x3}, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:06 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x4000, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000040)) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000000140)={0x0, 0x4, 0x8000, &(0x7f0000000100)=0x8}) prctl$PR_SET_ENDIAN(0x14, 0x1) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000240)) r2 = getpgid(0x0) r3 = gettid() getpgid(r3) r4 = openat$cgroup_procs(r0, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) r5 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x80800, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000200)={r0, r5, 0x744}) 20:13:06 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000fff000/0x1000)=nil, 0x1000) 20:13:06 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f00000000c0)) pselect6(0x40, &(0x7f0000000000)={0x3}, 0x0, &(0x7f0000000080)={0x8}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:06 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}) 20:13:06 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) socketpair(0x2, 0x800, 0x3c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000000)=0x4) socketpair(0x15, 0x1, 0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x50) 20:13:06 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) pselect6(0x40, &(0x7f0000000000)={0x3}, 0x0, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:06 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/thread-self\x00', 0x2502, 0x0) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000540), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r3, &(0x7f0000000900), 0x2, 0x0) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') r5 = gettid() getpgid(r5) r6 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xd4, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0xd4}}, 0x8881) 20:13:06 executing program 0: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000fff000/0x1000)=nil, 0x1000) 20:13:06 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) pselect6(0x40, &(0x7f0000000000)={0x3}, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:06 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f00000000c0)) pselect6(0x40, &(0x7f0000000000)={0x3}, 0x0, &(0x7f0000000080)={0x8}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:06 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 20:13:06 executing program 0: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmdt(r0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000fff000/0x1000)=nil, 0x1000) 20:13:06 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) socketpair(0x2, 0x800, 0x3c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000000)=0x4) socketpair(0x15, 0x1, 0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x50) 20:13:06 executing program 0: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmdt(r0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000fff000/0x1000)=nil, 0x1000) 20:13:06 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) pselect6(0x40, &(0x7f0000000000)={0x3}, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:06 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self\x00', 0x90000, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x8, 0x0) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f0000000000)) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:13:06 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x3}, 0x0, &(0x7f0000000080)={0x8}, &(0x7f0000000100)={0x0, r0+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:06 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 20:13:06 executing program 0: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmdt(r0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000fff000/0x1000)=nil, 0x1000) 20:13:07 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) socketpair(0x2, 0x800, 0x3c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000000)=0x4) socketpair(0x15, 0x1, 0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x50) 20:13:07 executing program 3: sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x44, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x7}}]}, 0x44}}, 0x4000000) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:13:07 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x3}, 0x0, &(0x7f0000000080)={0x8}, &(0x7f0000000100)={0x0, r0+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:07 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x1000) 20:13:07 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) pselect6(0x40, &(0x7f0000000000)={0x3}, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:07 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 20:13:07 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) socketpair(0x2, 0x800, 0x3c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000000)=0x4) socketpair(0x15, 0x1, 0x5, &(0x7f00000000c0)) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140)='NLBL_CIPSOv4\x00') 20:13:07 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0xa702, 0x0) 20:13:07 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x3}, 0x0, &(0x7f0000000080)={0x8}, &(0x7f0000000100)={0x0, r0+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:07 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x1000) 20:13:07 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) pselect6(0x40, &(0x7f0000000000)={0x3}, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:07 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 20:13:07 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f00000000c0)={0x0}) pselect6(0x40, &(0x7f0000000000)={0x3}, 0x0, &(0x7f0000000080)={0x8}, &(0x7f0000000100)={r0, 0x0}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:07 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) socketpair(0x2, 0x800, 0x3c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000000)=0x4) socketpair(0x15, 0x1, 0x5, &(0x7f00000000c0)) 20:13:07 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x1000) 20:13:07 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) pselect6(0x40, &(0x7f0000000000)={0x3}, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:07 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 20:13:07 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f0000000000)=0x4) 20:13:07 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 20:13:07 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) socketpair(0x2, 0x800, 0x3c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000000)=0x4) 20:13:07 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) pselect6(0x40, &(0x7f0000000000)={0x3}, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:07 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f00000000c0)={0x0}) pselect6(0x40, &(0x7f0000000000)={0x3}, 0x0, &(0x7f0000000080)={0x8}, &(0x7f0000000100)={r0, 0x0}, 0x0) 20:13:07 executing program 0: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r0) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000) 20:13:07 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000040)={0x0, 0x61, 0x7fff, &(0x7f0000000000)=0x4}) socket$can_j1939(0x1d, 0x2, 0x7) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x2000, 0x0) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:13:07 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) pselect6(0x40, &(0x7f0000000000)={0x3}, 0x0, &(0x7f0000000080)={0x8, 0x0, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:07 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 20:13:07 executing program 0: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r0) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000) 20:13:07 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$SOUND_PCM_READ_BITS(0xffffffffffffffff, 0x80045005, &(0x7f0000000000)) 20:13:07 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000040)={0x0, 0x61, 0x7fff, &(0x7f0000000000)=0x4}) socket$can_j1939(0x1d, 0x2, 0x7) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x2000, 0x0) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:13:07 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) socketpair(0x2, 0x800, 0x3c, &(0x7f0000000080)) 20:13:07 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) pselect6(0x40, &(0x7f0000000000)={0x3}, 0x0, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:08 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x53) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000040)={0xff, 0x6}) 20:13:08 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) 20:13:08 executing program 0: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r0) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000) 20:13:08 executing program 5: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r0) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000) 20:13:08 executing program 3: socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000040)='threaded\x00', 0x9) 20:13:08 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) pselect6(0x40, &(0x7f0000000000)={0x3}, 0x0, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:08 executing program 0: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000fff000/0x1000)=nil, 0x0) 20:13:08 executing program 1: socketpair(0x2, 0x800, 0x3c, &(0x7f0000000080)) 20:13:08 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) 20:13:08 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x53) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000040)={0xff, 0x6}) 20:13:08 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) pselect6(0x40, &(0x7f0000000000)={0x3}, 0x0, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, 0xf}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:08 executing program 0: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r0) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000) 20:13:08 executing program 3: ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000040)={0x5, 0x6, 0x39, &(0x7f0000000000)="0406545036ac809cda5f74e2aa751915bedd26fc01e60cb6840bb9e3aedfa07b8226083c24ed74f2287f438c2473c2f9b72ec63f273a6a43e9"}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:13:08 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) 20:13:08 executing program 5: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmdt(r0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000fff000/0x1000)=nil, 0x1000) 20:13:08 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) pselect6(0x40, &(0x7f0000000000)={0x3}, 0x0, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xf}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:08 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/thread-self\x00', 0x2502, 0x0) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000540), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r3, &(0x7f0000000900), 0x2, 0x0) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') r5 = gettid() getpgid(r5) r6 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xd4, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0xd4}}, 0x8881) 20:13:08 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x6}, 0x2) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:13:08 executing program 1: socketpair(0x0, 0x800, 0x3c, &(0x7f0000000080)) 20:13:08 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) 20:13:08 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) pselect6(0x40, &(0x7f0000000000)={0x3}, 0x0, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:08 executing program 5: socketpair(0x2, 0x800, 0x3c, &(0x7f0000000080)) 20:13:08 executing program 3: socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x2, 0x0) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000040)={0xa, 0x6, 0x1, 0x8, 'syz1\x00', 0x5}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x7f}, 0x2) 20:13:08 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/thread-self\x00', 0x2502, 0x0) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000540), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r3, &(0x7f0000000900), 0x2, 0x0) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') r5 = gettid() getpgid(r5) r6 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xd4, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0xd4}}, 0x8881) 20:13:08 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}) 20:13:08 executing program 1: socketpair(0x0, 0x800, 0x3c, &(0x7f0000000080)) 20:13:08 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) pselect6(0x40, &(0x7f0000000000)={0x3}, 0x0, &(0x7f0000000080)={0x8}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:08 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:13:08 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/thread-self\x00', 0x2502, 0x0) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000540), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r3, &(0x7f0000000900), 0x2, 0x0) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') r5 = gettid() getpgid(r5) r6 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xd4, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0xd4}}, 0x8881) 20:13:08 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) pselect6(0x40, &(0x7f0000000000)={0x3}, 0x0, &(0x7f0000000080)={0x8}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:08 executing program 5: socketpair(0x2, 0x800, 0x3c, &(0x7f0000000080)) 20:13:08 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 20:13:09 executing program 1: socketpair(0x0, 0x800, 0x3c, &(0x7f0000000080)) 20:13:09 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000000)={0x0, 0x2}, 0x2) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:13:09 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/thread-self\x00', 0x2502, 0x0) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000540), 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') r3 = gettid() getpgid(r3) gettid() 20:13:09 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) pselect6(0x40, &(0x7f0000000000)={0x3}, 0x0, &(0x7f0000000080)={0x8}, 0x0, 0x0) 20:13:09 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 20:13:09 executing program 5: socketpair(0x2, 0x800, 0x3c, &(0x7f0000000080)) 20:13:09 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000000), &(0x7f00000000c0)=0xfffffffffffffe40) 20:13:09 executing program 1: socketpair(0x2, 0x0, 0x3c, &(0x7f0000000080)) 20:13:09 executing program 2: socketpair(0x0, 0x800, 0x3c, &(0x7f0000000080)) 20:13:09 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/thread-self\x00', 0x2502, 0x0) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000540), 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') r3 = gettid() getpgid(r3) 20:13:09 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) 20:13:09 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 20:13:09 executing program 1: socketpair(0x2, 0x0, 0x0, &(0x7f0000000080)) 20:13:09 executing program 5: socketpair(0x0, 0x800, 0x3c, &(0x7f0000000080)) 20:13:09 executing program 2: socketpair(0x2, 0x0, 0x3c, &(0x7f0000000080)) 20:13:09 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/thread-self\x00', 0x2502, 0x0) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000540), 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') gettid() 20:13:09 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) 20:13:09 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}) 20:13:09 executing program 5: socketpair(0x0, 0x800, 0x3c, &(0x7f0000000080)) 20:13:09 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/thread-self\x00', 0x2502, 0x0) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000540), 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:09 executing program 1: socketpair(0x2, 0x0, 0x0, 0x0) 20:13:09 executing program 2: socketpair(0x2, 0x0, 0x3c, &(0x7f0000000080)) 20:13:09 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/thread-self\x00', 0x2502, 0x0) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000540), 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') gettid() 20:13:09 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) 20:13:09 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/thread-self\x00', 0x2502, 0x0) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000540), 0x4) socket$nl_generic(0x10, 0x3, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:09 executing program 5: socketpair(0x0, 0x800, 0x3c, &(0x7f0000000080)) 20:13:09 executing program 1: socketpair(0x2, 0x0, 0x0, 0x0) 20:13:10 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) 20:13:10 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/thread-self\x00', 0x2502, 0x0) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000540), 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:10 executing program 1: socketpair(0x2, 0x0, 0x0, 0x0) 20:13:10 executing program 2: socketpair(0x2, 0x0, 0x3c, &(0x7f0000000080)) 20:13:10 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) 20:13:10 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/thread-self\x00', 0x2502, 0x0) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000540), 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:10 executing program 5: socketpair(0x2, 0x0, 0x3c, &(0x7f0000000080)) 20:13:10 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/thread-self\x00', 0x2502, 0x0) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000540), 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:10 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000fff000/0x1000)=nil, 0x1000) 20:13:10 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}) 20:13:10 executing program 2: socketpair(0x0, 0x0, 0x3c, &(0x7f0000000080)) 20:13:10 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/thread-self\x00', 0x2502, 0x0) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000540), 0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:10 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/thread-self\x00', 0x2502, 0x0) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000540), 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:10 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000fff000/0x1000)=nil, 0x1000) 20:13:10 executing program 5: socketpair(0x2, 0x0, 0x0, &(0x7f0000000080)) 20:13:10 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 20:13:10 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/thread-self\x00', 0x2502, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:10 executing program 2: socketpair(0x0, 0x0, 0x3c, &(0x7f0000000080)) 20:13:10 executing program 1: socketpair(0x2, 0x0, 0x3c, &(0x7f0000000080)) 20:13:10 executing program 5: socketpair(0x2, 0x0, 0x0, 0x0) 20:13:10 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/thread-self\x00', 0x2502, 0x0) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000540), 0x4) socket$nl_generic(0x10, 0x3, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:10 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}) 20:13:10 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:10 executing program 2: socketpair(0x0, 0x0, 0x3c, &(0x7f0000000080)) 20:13:10 executing program 5: socketpair(0x2, 0x0, 0x0, 0x0) 20:13:10 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/thread-self\x00', 0x2502, 0x0) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000540), 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:10 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 20:13:11 executing program 2: socketpair(0x2, 0x0, 0x0, &(0x7f0000000080)) 20:13:11 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/thread-self\x00', 0x2502, 0x0) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000540), 0x4) socket$nl_generic(0x10, 0x3, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:11 executing program 5: socketpair(0x2, 0x0, 0x0, 0x0) 20:13:11 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:11 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/thread-self\x00', 0x2502, 0x0) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000540), 0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:11 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 20:13:11 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/thread-self\x00', 0x2502, 0x0) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000540), 0x4) socket$nl_generic(0x10, 0x3, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:11 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) pselect6(0x40, &(0x7f0000000000)={0x3}, &(0x7f0000000040)={0x1, 0x3, 0x8000, 0x6, 0x800, 0x5, 0x1f, 0x3d}, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:11 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:11 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/thread-self\x00', 0x2502, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:11 executing program 2: socketpair(0x2, 0x0, 0x0, 0x0) 20:13:11 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 20:13:11 executing program 5: socketpair(0x2, 0x0, 0x0, &(0x7f0000000080)) 20:13:11 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/thread-self\x00', 0x2502, 0x0) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000540), 0x4) socket$nl_generic(0x10, 0x3, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:11 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:11 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:11 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) 20:13:11 executing program 2: socketpair(0x2, 0x0, 0x0, 0x0) 20:13:11 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/thread-self\x00', 0x2502, 0x0) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000540), 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:11 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x1000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r2 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ff4000/0x3000)=nil) shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x0) shmat(r2, &(0x7f0000fec000/0x14000)=nil, 0x6000) shmdt(0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000040)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r3, &(0x7f0000000900), 0x2, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000080)) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, 0x1}, 0x10) shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffd000/0x2000)=nil) 20:13:11 executing program 2: socketpair(0x2, 0x0, 0x0, 0x0) 20:13:11 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:11 executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:11 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) 20:13:11 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/thread-self\x00', 0x2502, 0x0) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000540), 0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:11 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/thread-self\x00', 0x2502, 0x0) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000540), 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:11 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x1000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r2 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ff4000/0x3000)=nil) shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x0) shmat(r2, &(0x7f0000fec000/0x14000)=nil, 0x6000) shmdt(0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000040)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r3, &(0x7f0000000900), 0x2, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000080)) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, 0x1}, 0x10) shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffd000/0x2000)=nil) 20:13:11 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:11 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) 20:13:11 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/thread-self\x00', 0x2502, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:11 executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:12 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x3}, 0x0, 0x0, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:12 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:12 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) 20:13:12 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x1000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r2 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ff4000/0x3000)=nil) shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x0) shmat(r2, &(0x7f0000fec000/0x14000)=nil, 0x6000) shmdt(0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000040)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r3, &(0x7f0000000900), 0x2, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000080)) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, 0x1}, 0x10) shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffd000/0x2000)=nil) 20:13:12 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:12 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/thread-self\x00', 0x2502, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:12 executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:12 executing program 3: socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:12 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x1000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r2 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ff4000/0x3000)=nil) shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x0) shmat(r2, &(0x7f0000fec000/0x14000)=nil, 0x6000) shmdt(0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000040)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r3, &(0x7f0000000900), 0x2, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000080)) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, 0x1}, 0x10) shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffd000/0x2000)=nil) 20:13:12 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) 20:13:12 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:12 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:12 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/thread-self\x00', 0x2502, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:12 executing program 3: socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:12 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x1000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r2 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ff4000/0x3000)=nil) shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x0) shmat(r2, &(0x7f0000fec000/0x14000)=nil, 0x6000) shmdt(0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000040)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r3, &(0x7f0000000900), 0x2, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000080)) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, 0x1}, 0x10) 20:13:12 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:12 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 20:13:12 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}) 20:13:12 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/thread-self\x00', 0x2502, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:12 executing program 3: socket$can_j1939(0x1d, 0x2, 0x7) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:12 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x1000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r2 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ff4000/0x3000)=nil) shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x0) shmat(r2, &(0x7f0000fec000/0x14000)=nil, 0x6000) shmdt(0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000040)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r3, &(0x7f0000000900), 0x2, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000080)) 20:13:12 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:12 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 20:13:12 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 20:13:12 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:12 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x1000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r2 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ff4000/0x3000)=nil) shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x0) shmat(r2, &(0x7f0000fec000/0x14000)=nil, 0x6000) shmdt(0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000040)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r3, &(0x7f0000000900), 0x2, 0x0) 20:13:12 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:12 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:12 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 20:13:13 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}) 20:13:13 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:13 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x1000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r2 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ff4000/0x3000)=nil) shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x0) shmat(r2, &(0x7f0000fec000/0x14000)=nil, 0x6000) shmdt(0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000040)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 20:13:13 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 20:13:13 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:13 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:13 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 20:13:13 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:13 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x1000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r2 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ff4000/0x3000)=nil) shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x0) shmat(r2, &(0x7f0000fec000/0x14000)=nil, 0x6000) shmdt(0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000040)) 20:13:13 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:13 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 20:13:13 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:13 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 20:13:13 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:13 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:13 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x1000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r2 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ff4000/0x3000)=nil) shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x0) shmat(r2, &(0x7f0000fec000/0x14000)=nil, 0x6000) shmdt(0x0) 20:13:13 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 20:13:13 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 20:13:13 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:13 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:13 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 20:13:13 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x1000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r2 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ff4000/0x3000)=nil) shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x0) shmat(r2, &(0x7f0000fec000/0x14000)=nil, 0x6000) 20:13:13 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x1000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r2 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ff4000/0x3000)=nil) shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x0) shmat(r2, &(0x7f0000fec000/0x14000)=nil, 0x6000) shmdt(0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000040)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r3, &(0x7f0000000900), 0x2, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000080)) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, 0x1}, 0x10) 20:13:13 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 20:13:13 executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:13 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:13 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 20:13:13 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x1000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r2 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ff4000/0x3000)=nil) shmat(r2, &(0x7f0000fec000/0x14000)=nil, 0x6000) 20:13:13 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 20:13:13 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x1000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r2 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ff4000/0x3000)=nil) shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x0) shmat(r2, &(0x7f0000fec000/0x14000)=nil, 0x6000) shmdt(0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000040)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r3, &(0x7f0000000900), 0x2, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000080)) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, 0x1}, 0x10) 20:13:13 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:13 executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:13 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 20:13:14 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x1000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000fec000/0x14000)=nil, 0x6000) 20:13:14 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x1000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r2 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ff4000/0x3000)=nil) shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x0) shmat(r2, &(0x7f0000fec000/0x14000)=nil, 0x6000) shmdt(0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000040)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r3, &(0x7f0000000900), 0x2, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000080)) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, 0x1}, 0x10) 20:13:14 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x1000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r2 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ff4000/0x3000)=nil) shmat(r2, &(0x7f0000fec000/0x14000)=nil, 0x6000) 20:13:14 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:14 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 20:13:14 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 20:13:14 executing program 2: shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x1000) shmat(0x0, &(0x7f0000fec000/0x14000)=nil, 0x6000) 20:13:14 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x1000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r2 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ff4000/0x3000)=nil) shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x0) shmat(r2, &(0x7f0000fec000/0x14000)=nil, 0x6000) shmdt(0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000040)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r3, &(0x7f0000000900), 0x2, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000080)) 20:13:14 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x1000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r2 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ff4000/0x3000)=nil) shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x0) shmat(r2, &(0x7f0000fec000/0x14000)=nil, 0x6000) 20:13:14 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:14 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 20:13:14 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 20:13:14 executing program 2: shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000fec000/0x14000)=nil, 0x6000) 20:13:14 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x1000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r2 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ff4000/0x3000)=nil) shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x0) shmat(r2, &(0x7f0000fec000/0x14000)=nil, 0x6000) 20:13:14 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x1000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r2 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ff4000/0x3000)=nil) shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x0) shmat(r2, &(0x7f0000fec000/0x14000)=nil, 0x6000) shmdt(0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000040)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r3, &(0x7f0000000900), 0x2, 0x0) 20:13:14 executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:14 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) 20:13:14 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 20:13:14 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 20:13:14 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x1000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r2 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ff4000/0x3000)=nil) shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x0) shmat(r2, &(0x7f0000fec000/0x14000)=nil, 0x6000) shmdt(0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000040)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 20:13:14 executing program 2: shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(0x0, &(0x7f0000fec000/0x14000)=nil, 0x6000) 20:13:14 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 20:13:14 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) 20:13:14 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) 20:13:14 executing program 2: shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(0x0, &(0x7f0000fec000/0x14000)=nil, 0x6000) 20:13:14 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x1000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r2 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ff4000/0x3000)=nil) shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x0) shmat(r2, &(0x7f0000fec000/0x14000)=nil, 0x6000) shmdt(0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000040)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r3, &(0x7f0000000900), 0x2, 0x0) 20:13:14 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x1000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r2 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ff4000/0x3000)=nil) shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x0) shmat(r2, &(0x7f0000fec000/0x14000)=nil, 0x6000) shmdt(0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000040)) 20:13:14 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:14 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) 20:13:14 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:14 executing program 2: shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(0x0, &(0x7f0000fec000/0x14000)=nil, 0x6000) 20:13:15 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) 20:13:15 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create(0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x3c4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da88a5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa034}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f95de2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52aec5bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41824631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be815e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bfd2ed2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6065}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb487}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7456abf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbf2f85d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8751403}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f76c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310c8b44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9ea32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc173}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a13d0c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501a6c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d56800c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1076}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc067}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab52815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544fafb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f89a8f4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x514cfd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f53a7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafcba5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x366147a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f4ec3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9743f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d179b3f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b7d18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x353c24ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fea3cb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbfc5b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dad25a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0a3028}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406a8d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed31d4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77f66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7612a96e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3333c127}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177091f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638578ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458e83f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9b4728}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2c207c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19374504}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14fb5057}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792b3459}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db3066}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59657986}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8ffaeb2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57773c57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76efa1c2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4045f0f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f292b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/uts\x00') 20:13:15 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x1000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r2 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ff4000/0x3000)=nil) shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x0) shmat(r2, &(0x7f0000fec000/0x14000)=nil, 0x6000) shmdt(0x0) 20:13:15 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) 20:13:15 executing program 2: shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000fec000/0x14000)=nil, 0x6000) 20:13:15 executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x3}, 0x0, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x8, 0x7, 0x5, 0x7, 0xf}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 20:13:15 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0xffff32da}, 0x27) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x2, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x5}, 0x2) 20:13:15 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x1000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r2 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ff4000/0x3000)=nil) shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x0) shmat(r2, &(0x7f0000fec000/0x14000)=nil, 0x6000) 20:13:15 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x4, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x80000000}) 20:13:15 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}) 20:13:15 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000fec000/0x14000)=nil, 0x6000) 20:13:15 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00') getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:13:15 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x1000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r2 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ff4000/0x3000)=nil) shmat(r2, &(0x7f0000fec000/0x14000)=nil, 0x6000) 20:13:15 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x1000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r2 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ff4000/0x3000)=nil) shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x0) shmat(r2, &(0x7f0000fec000/0x14000)=nil, 0x6000) 20:13:15 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x4, 0x0) r1 = epoll_create1(0x80000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x80000000}) 20:13:15 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 20:13:15 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x6) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x8000000) 20:13:15 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(0x0, &(0x7f0000fec000/0x14000)=nil, 0x6000) 20:13:15 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:15 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x1000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000fec000/0x14000)=nil, 0x6000) 20:13:15 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x800, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x20800, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000340), 0x4) 20:13:15 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 20:13:15 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(0x0, &(0x7f0000fec000/0x14000)=nil, 0x6000) 20:13:15 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x6) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x8000000) 20:13:15 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000340), 0x4) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000000)=0x4) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x40200, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) 20:13:15 executing program 3: shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x1000) shmat(0x0, &(0x7f0000fec000/0x14000)=nil, 0x6000) 20:13:15 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x800, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x20800, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000340), 0x4) 20:13:15 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(0x0, &(0x7f0000fec000/0x14000)=nil, 0x6000) 20:13:15 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) 20:13:15 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x6) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x8000000) 20:13:15 executing program 3: shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000fec000/0x14000)=nil, 0x6000) 20:13:15 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x1000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000fec000/0x14000)=nil, 0x6000) 20:13:16 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x800, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x20800, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000340), 0x4) 20:13:16 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000fec000/0x14000)=nil, 0x0) 20:13:16 executing program 3: shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(0x0, &(0x7f0000fec000/0x14000)=nil, 0x6000) 20:13:16 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) 20:13:16 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x6) 20:13:16 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='W\x00\a\x00', @ANYRES16=r1, @ANYBLOB="20002cbd7000fedbdf25030000000500140005000000080019000a0101010c00100004000000000000000c000f0008000000000000000500060005000000"], 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f00000002c0)={{0x8, 0x3, 0x400, 0x7, 'syz1\x00', 0xffffffff}, 0x0, [0x7f, 0x1, 0x2, 0x0, 0x20, 0xffff, 0xde, 0x45, 0x1000, 0x3, 0x1, 0xfffffffffffffff9, 0x5, 0x9, 0x9, 0x9, 0x2, 0x4, 0x1, 0xfffffffffffff1ca, 0xffff, 0x2, 0x9, 0x0, 0x5, 0x200, 0xaeee, 0x3, 0x7, 0x2, 0xfff, 0x4, 0x1, 0x8, 0x9, 0x8, 0x4, 0x2, 0x2, 0x2, 0x200, 0x1f, 0x70a2, 0x3c3e, 0x8, 0x2, 0x163c, 0x1, 0x20, 0x2, 0x800, 0xfff, 0x1, 0x2e, 0xd00, 0xfffffffffffff2e5, 0xffffffffffff8001, 0x0, 0x40, 0x1, 0x40, 0x1, 0x6, 0xffffffff7fffffff, 0xad0a, 0x3, 0xfffffffffffff6a2, 0x1f, 0x5, 0x1, 0xfffffffffffffffc, 0x9, 0x7, 0x7, 0x5, 0x3, 0x3f, 0x9, 0x8, 0x967, 0xfffffffffffffffd, 0xe3, 0x7, 0x7, 0x8, 0x8, 0x40, 0x1, 0x8a, 0x1, 0x9, 0xe390, 0x2, 0x200, 0x1, 0x32fbde4, 0x40, 0x4, 0x1, 0x1, 0x3, 0xb014, 0x100000001, 0x6, 0x8001, 0xffffffffffffff7f, 0x1, 0x5, 0x2, 0x3ff, 0x2, 0x5, 0x2, 0x2, 0xffffffffffffffff, 0x1c, 0xff, 0x5, 0x8, 0x5, 0x9, 0x100000000, 0xff, 0x7, 0x1000000000, 0xcf8, 0x800, 0x5]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x40090}, 0x10) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:13:16 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x800, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x20800, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) socket$can_j1939(0x1d, 0x2, 0x7) 20:13:16 executing program 3: shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(0x0, &(0x7f0000fec000/0x14000)=nil, 0x6000) 20:13:16 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000fec000/0x14000)=nil, 0x0) 20:13:16 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) pipe2(&(0x7f0000000000), 0x0) 20:13:16 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) 20:13:16 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000fec000/0x14000)=nil, 0x0) 20:13:16 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x800, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x20800, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 20:13:16 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='W\x00\a\x00', @ANYRES16=r1, @ANYBLOB="20002cbd7000fedbdf25030000000500140005000000080019000a0101010c00100004000000000000000c000f0008000000000000000500060005000000"], 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f00000002c0)={{0x8, 0x3, 0x400, 0x7, 'syz1\x00', 0xffffffff}, 0x0, [0x7f, 0x1, 0x2, 0x0, 0x20, 0xffff, 0xde, 0x45, 0x1000, 0x3, 0x1, 0xfffffffffffffff9, 0x5, 0x9, 0x9, 0x9, 0x2, 0x4, 0x1, 0xfffffffffffff1ca, 0xffff, 0x2, 0x9, 0x0, 0x5, 0x200, 0xaeee, 0x3, 0x7, 0x2, 0xfff, 0x4, 0x1, 0x8, 0x9, 0x8, 0x4, 0x2, 0x2, 0x2, 0x200, 0x1f, 0x70a2, 0x3c3e, 0x8, 0x2, 0x163c, 0x1, 0x20, 0x2, 0x800, 0xfff, 0x1, 0x2e, 0xd00, 0xfffffffffffff2e5, 0xffffffffffff8001, 0x0, 0x40, 0x1, 0x40, 0x1, 0x6, 0xffffffff7fffffff, 0xad0a, 0x3, 0xfffffffffffff6a2, 0x1f, 0x5, 0x1, 0xfffffffffffffffc, 0x9, 0x7, 0x7, 0x5, 0x3, 0x3f, 0x9, 0x8, 0x967, 0xfffffffffffffffd, 0xe3, 0x7, 0x7, 0x8, 0x8, 0x40, 0x1, 0x8a, 0x1, 0x9, 0xe390, 0x2, 0x200, 0x1, 0x32fbde4, 0x40, 0x4, 0x1, 0x1, 0x3, 0xb014, 0x100000001, 0x6, 0x8001, 0xffffffffffffff7f, 0x1, 0x5, 0x2, 0x3ff, 0x2, 0x5, 0x2, 0x2, 0xffffffffffffffff, 0x1c, 0xff, 0x5, 0x8, 0x5, 0x9, 0x100000000, 0xff, 0x7, 0x1000000000, 0xcf8, 0x800, 0x5]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x40090}, 0x10) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:13:16 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) pipe2(&(0x7f0000000000), 0x0) 20:13:16 executing program 3: shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(0x0, &(0x7f0000fec000/0x14000)=nil, 0x6000) 20:13:16 executing program 1: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x800, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x20800, 0x0) 20:13:16 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) 20:13:16 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = gettid() getpgid(r1) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000006c0)='l2tp\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r3, &(0x7f0000000900), 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)={0x70, r2, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r3}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x28880}, 0x40005) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r5, &(0x7f0000000900), 0x2, 0x0) openat$cgroup_type(r5, &(0x7f0000000640)='cgroup.type\x00', 0x2, 0x0) waitid$P_PIDFD(0x3, r4, &(0x7f0000000900), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000100)={{0x3, 0x6, 0x7fff, 0x200, 'syz0\x00', 0xfffffff8}, 0x1, [0x5, 0x80, 0x5, 0x4365, 0x0, 0x9, 0x1, 0x4, 0x468, 0x7ff, 0x8, 0x9, 0x3f, 0x200, 0x9, 0x8, 0x401, 0x81, 0x2, 0xff, 0x4, 0x8000, 0x3ff, 0x5, 0x100000000, 0x7, 0x5, 0x80000000, 0x3, 0x1, 0x8, 0x2, 0x24, 0x9, 0x1f, 0x4, 0x5, 0x8, 0x6, 0x7, 0x8000000000000, 0x9, 0x0, 0xf7, 0x7, 0x3, 0x4, 0xffff, 0x401, 0x5, 0x8, 0x64d, 0x9, 0x7f, 0x5, 0x8, 0x3f, 0x1ff, 0xb54, 0x9, 0x8, 0x8, 0x100, 0x8000, 0x101, 0x6, 0xebb, 0x0, 0x4, 0x5, 0x8, 0x3, 0x7fff, 0x6, 0x10000, 0x100000001, 0x100, 0x4, 0x1, 0xd8c, 0x8000, 0x10000, 0x7fffffff, 0x101, 0x100, 0x61, 0x7f, 0x0, 0x6, 0x100, 0x9, 0x3, 0xd1, 0x3, 0x6, 0x1ff, 0x2, 0x6f1, 0x5, 0x61a2, 0x3, 0x9, 0x1d, 0x7, 0xf6, 0x8001, 0xff, 0x1, 0x2, 0x6, 0x7, 0xdec4, 0x5, 0x2, 0xffff, 0x100000000, 0x8, 0xffff, 0x52, 0x2, 0x6, 0xa6a, 0x7, 0x7, 0x6d87, 0x9, 0x1, 0x7]}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r6, 0x100, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, r6, 0x200, 0x70bd28, 0x25dfdbfe, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044881}, 0x800) getrusage(0x0, &(0x7f0000000840)) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4080, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, r4, &(0x7f0000000040)={0xffffffffffffffff, r7, 0xfffffffd}) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:13:16 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='W\x00\a\x00', @ANYRES16=r1, @ANYBLOB="20002cbd7000fedbdf25030000000500140005000000080019000a0101010c00100004000000000000000c000f0008000000000000000500060005000000"], 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f00000002c0)={{0x8, 0x3, 0x400, 0x7, 'syz1\x00', 0xffffffff}, 0x0, [0x7f, 0x1, 0x2, 0x0, 0x20, 0xffff, 0xde, 0x45, 0x1000, 0x3, 0x1, 0xfffffffffffffff9, 0x5, 0x9, 0x9, 0x9, 0x2, 0x4, 0x1, 0xfffffffffffff1ca, 0xffff, 0x2, 0x9, 0x0, 0x5, 0x200, 0xaeee, 0x3, 0x7, 0x2, 0xfff, 0x4, 0x1, 0x8, 0x9, 0x8, 0x4, 0x2, 0x2, 0x2, 0x200, 0x1f, 0x70a2, 0x3c3e, 0x8, 0x2, 0x163c, 0x1, 0x20, 0x2, 0x800, 0xfff, 0x1, 0x2e, 0xd00, 0xfffffffffffff2e5, 0xffffffffffff8001, 0x0, 0x40, 0x1, 0x40, 0x1, 0x6, 0xffffffff7fffffff, 0xad0a, 0x3, 0xfffffffffffff6a2, 0x1f, 0x5, 0x1, 0xfffffffffffffffc, 0x9, 0x7, 0x7, 0x5, 0x3, 0x3f, 0x9, 0x8, 0x967, 0xfffffffffffffffd, 0xe3, 0x7, 0x7, 0x8, 0x8, 0x40, 0x1, 0x8a, 0x1, 0x9, 0xe390, 0x2, 0x200, 0x1, 0x32fbde4, 0x40, 0x4, 0x1, 0x1, 0x3, 0xb014, 0x100000001, 0x6, 0x8001, 0xffffffffffffff7f, 0x1, 0x5, 0x2, 0x3ff, 0x2, 0x5, 0x2, 0x2, 0xffffffffffffffff, 0x1c, 0xff, 0x5, 0x8, 0x5, 0x9, 0x100000000, 0xff, 0x7, 0x1000000000, 0xcf8, 0x800, 0x5]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x40090}, 0x10) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:13:16 executing program 3: shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000fec000/0x14000)=nil, 0x6000) 20:13:16 executing program 0: pipe2(&(0x7f0000000000), 0x0) 20:13:16 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) 20:13:16 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x20800, 0x0) 20:13:16 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='W\x00\a\x00', @ANYRES16=r0, @ANYBLOB="20002cbd7000fedbdf25030000000500140005000000080019000a0101010c00100004000000000000000c000f0008000000000000000500060005000000"], 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f00000002c0)={{0x8, 0x3, 0x400, 0x7, 'syz1\x00', 0xffffffff}, 0x0, [0x7f, 0x1, 0x2, 0x0, 0x20, 0xffff, 0xde, 0x45, 0x1000, 0x3, 0x1, 0xfffffffffffffff9, 0x5, 0x9, 0x9, 0x9, 0x2, 0x4, 0x1, 0xfffffffffffff1ca, 0xffff, 0x2, 0x9, 0x0, 0x5, 0x200, 0xaeee, 0x3, 0x7, 0x2, 0xfff, 0x4, 0x1, 0x8, 0x9, 0x8, 0x4, 0x2, 0x2, 0x2, 0x200, 0x1f, 0x70a2, 0x3c3e, 0x8, 0x2, 0x163c, 0x1, 0x20, 0x2, 0x800, 0xfff, 0x1, 0x2e, 0xd00, 0xfffffffffffff2e5, 0xffffffffffff8001, 0x0, 0x40, 0x1, 0x40, 0x1, 0x6, 0xffffffff7fffffff, 0xad0a, 0x3, 0xfffffffffffff6a2, 0x1f, 0x5, 0x1, 0xfffffffffffffffc, 0x9, 0x7, 0x7, 0x5, 0x3, 0x3f, 0x9, 0x8, 0x967, 0xfffffffffffffffd, 0xe3, 0x7, 0x7, 0x8, 0x8, 0x40, 0x1, 0x8a, 0x1, 0x9, 0xe390, 0x2, 0x200, 0x1, 0x32fbde4, 0x40, 0x4, 0x1, 0x1, 0x3, 0xb014, 0x100000001, 0x6, 0x8001, 0xffffffffffffff7f, 0x1, 0x5, 0x2, 0x3ff, 0x2, 0x5, 0x2, 0x2, 0xffffffffffffffff, 0x1c, 0xff, 0x5, 0x8, 0x5, 0x9, 0x100000000, 0xff, 0x7, 0x1000000000, 0xcf8, 0x800, 0x5]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x40090}, 0x10) 20:13:16 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) pipe2(&(0x7f0000000000), 0x0) 20:13:16 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000fec000/0x14000)=nil, 0x6000) 20:13:16 executing program 0: pipe2(&(0x7f0000000000), 0x0) 20:13:16 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}) 20:13:16 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(0x0, &(0x7f0000fec000/0x14000)=nil, 0x6000) 20:13:16 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='W\x00\a\x00', @ANYRES16=r0, @ANYBLOB="20002cbd7000fedbdf25030000000500140005000000080019000a0101010c00100004000000000000000c000f0008000000000000000500060005000000"], 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f00000002c0)={{0x8, 0x3, 0x400, 0x7, 'syz1\x00', 0xffffffff}, 0x0, [0x7f, 0x1, 0x2, 0x0, 0x20, 0xffff, 0xde, 0x45, 0x1000, 0x3, 0x1, 0xfffffffffffffff9, 0x5, 0x9, 0x9, 0x9, 0x2, 0x4, 0x1, 0xfffffffffffff1ca, 0xffff, 0x2, 0x9, 0x0, 0x5, 0x200, 0xaeee, 0x3, 0x7, 0x2, 0xfff, 0x4, 0x1, 0x8, 0x9, 0x8, 0x4, 0x2, 0x2, 0x2, 0x200, 0x1f, 0x70a2, 0x3c3e, 0x8, 0x2, 0x163c, 0x1, 0x20, 0x2, 0x800, 0xfff, 0x1, 0x2e, 0xd00, 0xfffffffffffff2e5, 0xffffffffffff8001, 0x0, 0x40, 0x1, 0x40, 0x1, 0x6, 0xffffffff7fffffff, 0xad0a, 0x3, 0xfffffffffffff6a2, 0x1f, 0x5, 0x1, 0xfffffffffffffffc, 0x9, 0x7, 0x7, 0x5, 0x3, 0x3f, 0x9, 0x8, 0x967, 0xfffffffffffffffd, 0xe3, 0x7, 0x7, 0x8, 0x8, 0x40, 0x1, 0x8a, 0x1, 0x9, 0xe390, 0x2, 0x200, 0x1, 0x32fbde4, 0x40, 0x4, 0x1, 0x1, 0x3, 0xb014, 0x100000001, 0x6, 0x8001, 0xffffffffffffff7f, 0x1, 0x5, 0x2, 0x3ff, 0x2, 0x5, 0x2, 0x2, 0xffffffffffffffff, 0x1c, 0xff, 0x5, 0x8, 0x5, 0x9, 0x100000000, 0xff, 0x7, 0x1000000000, 0xcf8, 0x800, 0x5]}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x40090}, 0x10) 20:13:16 executing program 1: openat$nullb(0xffffffffffffff9c, 0x0, 0x20800, 0x0) 20:13:16 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:16 executing program 0: pipe2(&(0x7f0000000000), 0x0) 20:13:17 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='W\x00\a\x00', @ANYRES16=r0, @ANYBLOB="20002cbd7000fedbdf25030000000500140005000000080019000a0101010c00100004000000000000000c000f0008000000000000000500060005000000"], 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f00000002c0)={{0x8, 0x3, 0x400, 0x7, 'syz1\x00', 0xffffffff}, 0x0, [0x7f, 0x1, 0x2, 0x0, 0x20, 0xffff, 0xde, 0x45, 0x1000, 0x3, 0x1, 0xfffffffffffffff9, 0x5, 0x9, 0x9, 0x9, 0x2, 0x4, 0x1, 0xfffffffffffff1ca, 0xffff, 0x2, 0x9, 0x0, 0x5, 0x200, 0xaeee, 0x3, 0x7, 0x2, 0xfff, 0x4, 0x1, 0x8, 0x9, 0x8, 0x4, 0x2, 0x2, 0x2, 0x200, 0x1f, 0x70a2, 0x3c3e, 0x8, 0x2, 0x163c, 0x1, 0x20, 0x2, 0x800, 0xfff, 0x1, 0x2e, 0xd00, 0xfffffffffffff2e5, 0xffffffffffff8001, 0x0, 0x40, 0x1, 0x40, 0x1, 0x6, 0xffffffff7fffffff, 0xad0a, 0x3, 0xfffffffffffff6a2, 0x1f, 0x5, 0x1, 0xfffffffffffffffc, 0x9, 0x7, 0x7, 0x5, 0x3, 0x3f, 0x9, 0x8, 0x967, 0xfffffffffffffffd, 0xe3, 0x7, 0x7, 0x8, 0x8, 0x40, 0x1, 0x8a, 0x1, 0x9, 0xe390, 0x2, 0x200, 0x1, 0x32fbde4, 0x40, 0x4, 0x1, 0x1, 0x3, 0xb014, 0x100000001, 0x6, 0x8001, 0xffffffffffffff7f, 0x1, 0x5, 0x2, 0x3ff, 0x2, 0x5, 0x2, 0x2, 0xffffffffffffffff, 0x1c, 0xff, 0x5, 0x8, 0x5, 0x9, 0x100000000, 0xff, 0x7, 0x1000000000, 0xcf8, 0x800, 0x5]}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x40090}, 0x10) 20:13:17 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 20:13:17 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(0x0, &(0x7f0000fec000/0x14000)=nil, 0x6000) 20:13:17 executing program 1: openat$nullb(0xffffffffffffff9c, 0x0, 0x20800, 0x0) 20:13:17 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) pipe2(&(0x7f0000000000), 0x0) 20:13:17 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(0x0, &(0x7f0000fec000/0x14000)=nil, 0x6000) 20:13:17 executing program 1: openat$nullb(0xffffffffffffff9c, 0x0, 0x20800, 0x0) 20:13:17 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}) 20:13:17 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(0x0, &(0x7f0000fec000/0x14000)=nil, 0x6000) 20:13:17 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='W\x00\a\x00', @ANYRES16=r0, @ANYBLOB="20002cbd7000fedbdf25030000000500140005000000080019000a0101010c00100004000000000000000c000f0008000000000000000500060005000000"], 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f00000002c0)={{0x8, 0x3, 0x400, 0x7, 'syz1\x00', 0xffffffff}, 0x0, [0x7f, 0x1, 0x2, 0x0, 0x20, 0xffff, 0xde, 0x45, 0x1000, 0x3, 0x1, 0xfffffffffffffff9, 0x5, 0x9, 0x9, 0x9, 0x2, 0x4, 0x1, 0xfffffffffffff1ca, 0xffff, 0x2, 0x9, 0x0, 0x5, 0x200, 0xaeee, 0x3, 0x7, 0x2, 0xfff, 0x4, 0x1, 0x8, 0x9, 0x8, 0x4, 0x2, 0x2, 0x2, 0x200, 0x1f, 0x70a2, 0x3c3e, 0x8, 0x2, 0x163c, 0x1, 0x20, 0x2, 0x800, 0xfff, 0x1, 0x2e, 0xd00, 0xfffffffffffff2e5, 0xffffffffffff8001, 0x0, 0x40, 0x1, 0x40, 0x1, 0x6, 0xffffffff7fffffff, 0xad0a, 0x3, 0xfffffffffffff6a2, 0x1f, 0x5, 0x1, 0xfffffffffffffffc, 0x9, 0x7, 0x7, 0x5, 0x3, 0x3f, 0x9, 0x8, 0x967, 0xfffffffffffffffd, 0xe3, 0x7, 0x7, 0x8, 0x8, 0x40, 0x1, 0x8a, 0x1, 0x9, 0xe390, 0x2, 0x200, 0x1, 0x32fbde4, 0x40, 0x4, 0x1, 0x1, 0x3, 0xb014, 0x100000001, 0x6, 0x8001, 0xffffffffffffff7f, 0x1, 0x5, 0x2, 0x3ff, 0x2, 0x5, 0x2, 0x2, 0xffffffffffffffff, 0x1c, 0xff, 0x5, 0x8, 0x5, 0x9, 0x100000000, 0xff, 0x7, 0x1000000000, 0xcf8, 0x800, 0x5]}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x40090}, 0x10) 20:13:17 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) pipe2(&(0x7f0000000000), 0x0) 20:13:17 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil) shmdt(0x0) 20:13:17 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 20:13:17 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='W\x00\a\x00', @ANYRES16=r0, @ANYBLOB="20002cbd7000fedbdf25030000000500140005000000080019000a0101010c00100004000000000000000c000f0008000000000000000500060005000000"], 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x40090}, 0x10) 20:13:17 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000fec000/0x14000)=nil, 0x0) 20:13:17 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) 20:13:17 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(0x0, &(0x7f0000fec000/0x14000)=nil, 0x6000) 20:13:17 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) pipe2(&(0x7f0000000000), 0x0) 20:13:17 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) 20:13:17 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 20:13:17 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) pipe2(0x0, 0x0) 20:13:17 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000fec000/0x14000)=nil, 0x0) 20:13:17 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x40090}, 0x10) 20:13:17 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:17 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) 20:13:17 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000fec000/0x14000)=nil, 0x0) 20:13:17 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) pipe2(0x0, 0x0) 20:13:17 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 20:13:17 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x103040, 0x0) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000100)=0x3, 0x4) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self\x00', 0x88000, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000000)=0x5, 0x4) 20:13:17 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x40090}, 0x10) 20:13:17 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) 20:13:17 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) pipe2(0x0, 0x0) 20:13:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x40090}, 0x10) 20:13:18 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x5000) r0 = shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0xe000) shmdt(r0) r1 = shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmdt(r1) shmdt(r1) 20:13:18 executing program 1: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:18 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x103040, 0x0) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000100)=0x3, 0x4) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self\x00', 0x88000, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000000)=0x5, 0x4) 20:13:18 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x40090}, 0x10) 20:13:18 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) 20:13:18 executing program 0: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x6000) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x2010, r2, 0x0) shmdt(0x0) ioctl$SNDCTL_DSP_GETCAPS(r2, 0x8004500f, &(0x7f0000000000)) 20:13:18 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x5000) r0 = shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0xe000) shmdt(r0) r1 = shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmdt(r1) shmdt(r1) 20:13:18 executing program 1: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:18 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x103040, 0x0) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000100)=0x3, 0x4) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self\x00', 0x88000, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000000)=0x5, 0x4) 20:13:18 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x40090}, 0x10) 20:13:18 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) 20:13:18 executing program 1: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:18 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x103040, 0x0) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000100)=0x3, 0x4) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self\x00', 0x88000, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) 20:13:18 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x5000) r0 = shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0xe000) shmdt(r0) r1 = shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmdt(r1) shmdt(r1) 20:13:18 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000280)) shmdt(r1) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x24040040) 20:13:18 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x40090}, 0x10) 20:13:18 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) 20:13:18 executing program 1: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r0) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:18 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x5000) r0 = shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0xe000) shmdt(r0) r1 = shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmdt(r1) 20:13:18 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x103040, 0x0) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000100)=0x3, 0x4) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self\x00', 0x88000, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) 20:13:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, 0x0, 0x10) 20:13:18 executing program 1: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:18 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) 20:13:18 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x5000) r0 = shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0xe000) shmdt(r0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) 20:13:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, 0x0, 0x10) 20:13:18 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x103040, 0x0) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000100)=0x3, 0x4) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self\x00', 0x88000, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) 20:13:19 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000280)) shmdt(r1) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x24040040) 20:13:19 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:19 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}) 20:13:19 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x103040, 0x0) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000100)=0x3, 0x4) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) 20:13:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, 0x0, 0x10) 20:13:19 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x5000) r0 = shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0xe000) shmdt(r0) 20:13:19 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x103040, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) 20:13:19 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:19 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0xe000) 20:13:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x40090}, 0x10) 20:13:19 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 20:13:19 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) 20:13:19 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000280)) shmdt(r1) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x24040040) 20:13:19 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40090}, 0x10) 20:13:19 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}) 20:13:19 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0xe000) 20:13:19 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) 20:13:19 executing program 1: shmdt(0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:19 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0xe000) 20:13:19 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 20:13:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40090}, 0x10) 20:13:19 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) 20:13:19 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 20:13:20 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000280)) shmdt(r1) 20:13:20 executing program 1: shmdt(0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40090}, 0x10) 20:13:20 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0xe000) 20:13:20 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x103040, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) 20:13:20 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 20:13:20 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x103040, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) 20:13:20 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0xe000) 20:13:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0xfffffffffffffffe}}, 0x10) 20:13:20 executing program 1: shmdt(0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:20 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 20:13:20 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x103040, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) 20:13:20 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000280)) 20:13:20 executing program 1: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmdt(r0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:20 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0xe000) 20:13:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0xfffffffffffffffe}}, 0x0) 20:13:20 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 20:13:20 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x103040, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) 20:13:21 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x103040, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) 20:13:21 executing program 1: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmdt(r0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:21 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0xe000) 20:13:21 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 20:13:21 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000280)) shmdt(r1) 20:13:21 executing program 1: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmdt(r0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:21 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) 20:13:21 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0xe000) 20:13:21 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) 20:13:21 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 20:13:21 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:21 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0xe000) 20:13:21 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:21 executing program 2: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) 20:13:21 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) 20:13:21 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000280)) shmdt(r1) 20:13:21 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:21 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x0) 20:13:22 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r1) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 20:13:22 executing program 2: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) 20:13:22 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) 20:13:22 executing program 1: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) 20:13:22 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x0) 20:13:22 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x0) 20:13:22 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) 20:13:22 executing program 1: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) 20:13:22 executing program 2: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) 20:13:22 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000280)) shmdt(r1) 20:13:22 executing program 1: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) 20:13:22 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) 20:13:22 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r1) 20:13:22 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) 20:13:22 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:22 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}) 20:13:22 executing program 1: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) 20:13:22 executing program 1: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) 20:13:22 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 20:13:23 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000280)) shmdt(r1) 20:13:23 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0xe000) 20:13:23 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000280)) 20:13:23 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 20:13:23 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 20:13:23 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:23 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) 20:13:23 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x103040, 0x0) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000100)=0x3, 0x4) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self\x00', 0x88000, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) 20:13:23 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) 20:13:23 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) 20:13:23 executing program 1: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:23 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000280)) shmdt(r1) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x24040040) 20:13:23 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000280)) shmdt(r1) 20:13:23 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) 20:13:23 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) 20:13:23 executing program 1: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:23 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) 20:13:24 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:24 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) 20:13:24 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000280)) 20:13:24 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}) 20:13:24 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:24 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:24 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000280)) shmdt(r1) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x24040040) 20:13:24 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000280)) shmdt(r1) 20:13:24 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 20:13:24 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r1) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 20:13:24 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}) 20:13:24 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:24 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 20:13:24 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:24 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:24 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 20:13:24 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:24 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:24 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000280)) shmdt(r1) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x24040040) 20:13:24 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 20:13:24 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:25 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r1) 20:13:25 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:25 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000280)) 20:13:25 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) 20:13:25 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:25 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) 20:13:25 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:25 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:25 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) 20:13:25 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000280)) shmdt(r1) 20:13:25 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:25 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:25 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:25 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) 20:13:25 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) 20:13:25 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:25 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:25 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) 20:13:25 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:25 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:25 executing program 1: shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:26 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000280)) 20:13:26 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:26 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}) 20:13:26 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:26 executing program 1: shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:26 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 20:13:26 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:26 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r1) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 20:13:26 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:26 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}) 20:13:26 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:26 executing program 1: shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:26 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) 20:13:26 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:26 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 20:13:26 executing program 1: shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:26 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:26 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:26 executing program 1: shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 20:13:26 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r1) 20:13:26 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 20:13:26 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:26 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:26 executing program 1: shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 20:13:27 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r1) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 20:13:27 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 20:13:27 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:27 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:27 executing program 1: shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 20:13:27 executing program 1: shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 20:13:27 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:27 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:27 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:27 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 20:13:27 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:27 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:27 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r1) 20:13:27 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:27 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 20:13:27 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:27 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:27 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:28 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 20:13:28 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:28 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:28 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:28 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) 20:13:28 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 20:13:28 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:28 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:28 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) 20:13:28 executing program 1: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:28 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:28 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:28 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:28 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) 20:13:28 executing program 1: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:28 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 20:13:28 executing program 1: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:28 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:29 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) 20:13:29 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) 20:13:29 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 20:13:29 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:29 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 20:13:29 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:29 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) 20:13:29 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:29 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:29 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) 20:13:29 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 20:13:29 executing program 3: shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) 20:13:29 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:29 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:29 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 20:13:29 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}) 20:13:29 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:29 executing program 3: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 20:13:29 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:29 executing program 3: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:29 executing program 1: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:29 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 20:13:29 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:30 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:30 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:30 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 20:13:30 executing program 1: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:30 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:30 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:30 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:30 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:30 executing program 1: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:30 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:30 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:30 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) 20:13:30 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:30 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:30 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) 20:13:30 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:30 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:30 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:30 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:30 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:30 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:30 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:30 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) 20:13:30 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:30 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:30 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:30 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:30 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:30 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) 20:13:30 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:30 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:30 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:30 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:30 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:31 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 20:13:31 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) 20:13:31 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:31 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:31 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}) 20:13:31 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:31 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:31 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 20:13:31 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:31 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:31 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 20:13:31 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:31 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:31 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:31 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 20:13:31 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:31 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:31 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}) 20:13:31 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:31 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 20:13:31 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:31 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:31 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:31 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:31 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 20:13:31 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 20:13:31 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:31 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:31 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:31 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:31 executing program 3: r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:31 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 20:13:31 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 20:13:31 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:32 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:32 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r1) 20:13:32 executing program 3: r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:32 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 20:13:32 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:32 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:32 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:32 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:32 executing program 5: shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:32 executing program 3: r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:32 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) 20:13:32 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:32 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:32 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r1) 20:13:32 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:32 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) 20:13:32 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:32 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:32 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:32 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:32 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:32 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:32 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:32 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) 20:13:32 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000280)) shmdt(r1) 20:13:33 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r1) 20:13:33 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:33 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 20:13:33 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) 20:13:33 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:33 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:33 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:33 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) 20:13:33 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 20:13:33 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:33 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 20:13:33 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000280)) shmdt(r1) 20:13:33 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:33 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:33 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}) 20:13:33 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:33 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:34 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 20:13:34 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:34 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:34 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:34 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}) 20:13:34 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:34 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000280)) shmdt(r1) 20:13:34 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) 20:13:34 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 20:13:34 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:34 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 20:13:34 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:34 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 20:13:34 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 20:13:34 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:34 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:34 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 20:13:34 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 20:13:34 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000280)) 20:13:35 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:35 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:35 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:35 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 20:13:35 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:35 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:35 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 20:13:35 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:35 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:35 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:35 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 20:13:35 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) 20:13:35 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:35 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:35 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:35 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:35 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:35 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 20:13:35 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:35 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:35 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:35 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) 20:13:35 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:36 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r1) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 20:13:36 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:36 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:36 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:36 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:36 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) 20:13:36 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) 20:13:36 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:36 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:36 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:36 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 20:13:36 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) 20:13:36 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r1) 20:13:36 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:36 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 20:13:36 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:36 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}) 20:13:36 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:36 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:36 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 20:13:36 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:36 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:37 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:37 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 20:13:37 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:37 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 20:13:37 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:37 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:37 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:37 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 20:13:37 executing program 3: r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:37 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:37 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) 20:13:37 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:37 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:37 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:38 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) 20:13:38 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:38 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:38 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) 20:13:38 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:38 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:38 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:38 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:38 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:38 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:38 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) 20:13:38 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:38 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:38 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:38 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:38 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) 20:13:38 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:38 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:38 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:38 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:38 executing program 2: shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:38 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:38 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) 20:13:39 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:39 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:39 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000280)) 20:13:39 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:39 executing program 2: shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:39 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}) 20:13:39 executing program 2: shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:39 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:39 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:39 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:39 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 20:13:39 executing program 2: shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:39 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:39 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:39 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:39 executing program 2: shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 20:13:39 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 20:13:39 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}) 20:13:39 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:39 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:39 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 20:13:39 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:39 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:39 executing program 2: shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 20:13:39 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 20:13:39 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:39 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:39 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:40 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 20:13:40 executing program 2: shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 20:13:40 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:40 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 20:13:40 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:40 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:40 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 20:13:40 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 20:13:40 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:40 executing program 3: shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:40 executing program 2: shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:40 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:40 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 20:13:40 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) 20:13:40 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 20:13:40 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x220, &(0x7f0000000040)={[{0xb6, 0x4e00, "b2a4588fbae50d48fdd34b9684d629e12caba80fed5333dc79ee1456faefd95cf613a6263d860176fd5d8ce18d32b3982f28c9392774094a0280993b769b189414d6a7474e8739fb8783f44d2a2bf139883735c12fbf8cc8c6ddb63b50624015e968cc4245960bf3f4b99d56dfe9a2291013b5aa50688d592579d85466c4beafbf6f890628e8a2f4a0947eecb70b8718bc58fd230651144ff8c4bcd3f9267dc598eb9526fa74a02b5f6e6dfbbb2fa348a94014126f52"}, {0xef, 0x4e00, "d937f1b304bbb16bc95335281721794186b2f2349607f00b9924bef160a015996c2dfbdfd221eb6b1f023ce7ff34108047951cd00c3ef4c337b6c4be3d86f63f849bd0f24d980a5fd593dfb07fbefe287382e9906a7ed4589fa5ce2da95e03146c8696e43c4c7b96417d08e93b2895815ac39881629e14e9c266c8050ce7e3347bdc26855bc2eb17afb4d741f0822c4caf383f75722559f905ae181020ae26fd9568493ea96f7c1bc06f38e108c1edb26de8d6ede632845c272efb1febd9a1a8bf4d23f63ec6bbc82cc14f17a5105e7238f5d3596081788deac0aa01ff3ae21eea911a35601f65b5fe63f93603565c"}, {0x3e, 0x4e00, "05116ec28deba4e819939bf772e6d0ca99141cbe073b7b1a53168546e27740fe0a6c8b455116c100070bb5e53cfe5854e1b7700c495b074902c071696fd5"}, {0x26, 0x4e00, "e5621254dbe823eb3d5fb41a4f08bd763a33156a8e4e254ddec1279375295614c88dffea01d3"}]}) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000280)) 20:13:40 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:40 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:40 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 20:13:40 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) 20:13:40 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:40 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:40 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:40 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:40 executing program 3: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:40 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) 20:13:40 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:41 executing program 0: shmget$private(0x0, 0x2000, 0x9d027595de151062, &(0x7f0000ffc000/0x2000)=nil) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmdt(0x0) 20:13:41 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:41 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) syz_genetlink_get_family_id$l2tp(0xffffffffffffffff) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000340), 0x4) 20:13:41 executing program 3: shmget$private(0x0, 0x2000, 0x9d027595de151062, &(0x7f0000ffc000/0x2000)=nil) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmdt(0x0) 20:13:41 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) 20:13:41 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:41 executing program 3: shmget$private(0x0, 0x2000, 0x9d027595de151062, &(0x7f0000ffc000/0x2000)=nil) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmdt(0x0) 20:13:41 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) syz_genetlink_get_family_id$l2tp(0xffffffffffffffff) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000340), 0x4) 20:13:41 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) 20:13:41 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:41 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:41 executing program 0: shmget$private(0x0, 0x2000, 0x9d027595de151062, &(0x7f0000ffc000/0x2000)=nil) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmdt(0x0) 20:13:41 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}) 20:13:41 executing program 3: shmget$private(0x0, 0x2000, 0x9d027595de151062, &(0x7f0000ffc000/0x2000)=nil) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmdt(0x0) 20:13:41 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) syz_genetlink_get_family_id$l2tp(0xffffffffffffffff) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000340), 0x4) 20:13:41 executing program 0: shmget$private(0x0, 0x2000, 0x9d027595de151062, &(0x7f0000ffc000/0x2000)=nil) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmdt(0x0) 20:13:41 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:41 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:41 executing program 3: shmget$private(0x0, 0x2000, 0x9d027595de151062, &(0x7f0000ffc000/0x2000)=nil) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmdt(0x0) 20:13:41 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 20:13:41 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) syz_genetlink_get_family_id$l2tp(0xffffffffffffffff) 20:13:41 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:41 executing program 0: shmget$private(0x0, 0x2000, 0x9d027595de151062, &(0x7f0000ffc000/0x2000)=nil) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) 20:13:41 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:41 executing program 3: shmget$private(0x0, 0x2000, 0x9d027595de151062, &(0x7f0000ffc000/0x2000)=nil) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) 20:13:41 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}) 20:13:41 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:41 executing program 1: syz_genetlink_get_family_id$l2tp(0xffffffffffffffff) 20:13:41 executing program 3: shmget$private(0x0, 0x2000, 0x9d027595de151062, &(0x7f0000ffc000/0x2000)=nil) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 20:13:41 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:41 executing program 0: shmget$private(0x0, 0x2000, 0x9d027595de151062, &(0x7f0000ffc000/0x2000)=nil) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 20:13:41 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:41 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 20:13:41 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:41 executing program 0: shmget$private(0x0, 0x2000, 0x9d027595de151062, &(0x7f0000ffc000/0x2000)=nil) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) 20:13:41 executing program 3: shmget$private(0x0, 0x2000, 0x9d027595de151062, &(0x7f0000ffc000/0x2000)=nil) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) 20:13:42 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:42 executing program 0: shmget$private(0x0, 0x2000, 0x9d027595de151062, &(0x7f0000ffc000/0x2000)=nil) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) 20:13:42 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 20:13:42 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:42 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xc47) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:42 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:42 executing program 3: shmget$private(0x0, 0x2000, 0x9d027595de151062, &(0x7f0000ffc000/0x2000)=nil) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) 20:13:42 executing program 0: shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) 20:13:42 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:42 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:42 executing program 3: shmget$private(0x0, 0x2000, 0x9d027595de151062, &(0x7f0000ffc000/0x2000)=nil) 20:13:42 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:42 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 20:13:42 executing program 0: shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 20:13:42 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:42 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 20:13:42 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 20:13:42 executing program 3: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) 20:13:42 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:42 executing program 0: shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 20:13:42 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 20:13:42 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:42 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 20:13:42 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 20:13:42 executing program 3: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) 20:13:42 executing program 0: shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 20:13:42 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:42 executing program 1: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 20:13:42 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 20:13:42 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 20:13:42 executing program 3: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) 20:13:42 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 20:13:42 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:43 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:43 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 20:13:43 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 20:13:43 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 20:13:43 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:43 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 20:13:43 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:43 executing program 1: shmget$private(0x0, 0x2000, 0x9d027595de151062, &(0x7f0000ffc000/0x2000)=nil) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) 20:13:43 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self\x00', 0x80243, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x8044, 0x0) ioctl$PPPIOCSMRU1(r3, 0x40047452, &(0x7f0000000240)=0x1f) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x2, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r4, &(0x7f0000000900), 0x2, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000280)=0x3) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r5, &(0x7f00000000c0), 0x2, 0x0) waitid$P_PIDFD(0x3, r5, &(0x7f0000000180), 0x2, 0x0) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000040)=0x1fffff, 0x4) 20:13:43 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:43 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) 20:13:43 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:43 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:43 executing program 1: shmget$private(0x0, 0x2000, 0x9d027595de151062, &(0x7f0000ffc000/0x2000)=nil) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) 20:13:43 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:43 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) 20:13:43 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 20:13:43 executing program 5: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:43 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:43 executing program 1: shmget$private(0x0, 0x2000, 0x9d027595de151062, &(0x7f0000ffc000/0x2000)=nil) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) 20:13:43 executing program 3: shmdt(0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x94012, 0xffffffffffffffff, 0x10000000) shmdt(0x0) r0 = shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) 20:13:43 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 20:13:43 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) 20:13:43 executing program 5: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:43 executing program 1: shmget$private(0x0, 0x2000, 0x9d027595de151062, &(0x7f0000ffc000/0x2000)=nil) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 20:13:43 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:43 executing program 3: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:43 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 20:13:43 executing program 5: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:43 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) 20:13:43 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:43 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 20:13:43 executing program 1: shmget$private(0x0, 0x2000, 0x9d027595de151062, &(0x7f0000ffc000/0x2000)=nil) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) 20:13:44 executing program 2: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}}, 0x4) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) 20:13:44 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}) 20:13:44 executing program 3: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}}, 0x4) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) 20:13:44 executing program 5: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:44 executing program 1: shmget$private(0x0, 0x2000, 0x9d027595de151062, &(0x7f0000ffc000/0x2000)=nil) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) 20:13:44 executing program 0: shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:44 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 20:13:44 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = gettid() r2 = getpgid(r1) epoll_create(0xfffffffd) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r4 = epoll_create(0xfd2) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x9, &(0x7f00000001c0)=[{0x5, 0xd6, 0x4, 0x4}, {0x9, 0x1f, 0x6, 0x7}, {0xc62, 0x6, 0x0, 0x3}, {0xfff, 0x1c, 0x6, 0x7ffffffd}, {0x40, 0x3f, 0x1f}, {0xd7, 0x8, 0x81, 0x5}, {0x400, 0xec, 0x4, 0x2}, {0x1f, 0x8, 0x3d, 0xfffffffb}, {0x7f, 0xa3, 0xd9, 0x5}]}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r5, &(0x7f0000000900), 0x2, 0x0) r6 = getpgid(r2) kcmp$KCMP_EPOLL_TFD(r6, r6, 0x7, r0, &(0x7f0000000100)={r3, r5, 0x40004}) 20:13:44 executing program 0: shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:44 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000340), 0x4) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x20000, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000bb9cadd0090242e6d95f7007600a3b6db372c9d75686b79fcdea459dadc414a61a13282135c531504debe8655c415b2bcad64222924ea6ac818b0bed2af613e8cf41a5a80814e0408cbdeed8b8b7477e2a7301af1107652cc8d96ad5e73bc3eddc942b2a015781f4ce83e16302e353c6aef3beadf62f1225a9483777a4b04d8a2868fecad49f6fea22d60857db3525c2221070d9631542df0d4ddc630a08151410622e8434", @ANYRES16=r2, @ANYBLOB="000127bd7000fddbdf2542000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="88010000", @ANYRES16=r2, @ANYBLOB="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"/383], 0x188}, 0x1, 0x0, 0x0, 0x10}, 0x40840) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000000)) ioctl$BLKRRPART(r1, 0x125f, 0x0) 20:13:44 executing program 1: shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) 20:13:44 executing program 5: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:44 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 20:13:44 executing program 1: shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 20:13:44 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000000)=0x80000000) shmdt(0x0) 20:13:44 executing program 0: shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:44 executing program 5: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:44 executing program 3: shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:44 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) 20:13:44 executing program 1: shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 20:13:44 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) 20:13:44 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x101a02, 0x0) 20:13:44 executing program 5: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:44 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 20:13:44 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:44 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) 20:13:44 executing program 1: shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 20:13:44 executing program 2: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x2000)=nil, 0x4000) r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r0) shmdt(r0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:44 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000340), 0x4) 20:13:44 executing program 5: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x2000)=nil, 0x4000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:44 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:44 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, &(0x7f0000000000)) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x30, 0xffffffffffffffff, 0x0) shmat(r2, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r2, &(0x7f0000ffc000/0x2000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0) shmdt(0x0) 20:13:45 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) 20:13:45 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:45 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:45 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000340), 0x4) 20:13:45 executing program 5: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x2000)=nil, 0x4000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:45 executing program 1: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x2000)=nil, 0x4000) r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r0) shmdt(r0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:45 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:45 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) 20:13:45 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="ac100000", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fbdbdf2518000000080001007063690011000200303030303a30303a31302e3000000000080003000300000008000b000700000006001600060000000500120001000000060011000008000008000b0004000000080001007063690011000200303030303a30303a31302e3000000000080003000200000008000b000400000006001600070000000500120001000000060011000300000008000b0008000000"], 0xac}, 0x1, 0x0, 0x0, 0x885}, 0x20040044) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000340), 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000380)='NLBL_CIPSOv4\x00') r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, &(0x7f00000007c0)=0x5, 0x4) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2008000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x180, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x3653}, {0x8, 0x15, 0x40}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x101}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x7fffffff}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x61eff2c3}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x10000}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x100}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7f}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x9}}]}, 0x180}, 0x1, 0x0, 0x0, 0xc011}, 0x22004005) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x98, r3, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x74, 0x8, 0x0, 0x1, [{0x4}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x89}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b6bb214}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x574ee869}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19214a3d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7cae2990}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ba1ba6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fa7892f}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x98}, 0x1, 0x0, 0x0, 0x40800}, 0x8024) getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f00000002c0)={0xc223, 0x1}) 20:13:45 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000340), 0x4) 20:13:45 executing program 5: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x2000)=nil, 0x4000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:45 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x2, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f00000001c0)={0x0, 0xfe}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x20100, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000040)=""/197) r2 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ff9000/0x4000)=nil) shmat(r2, &(0x7f0000ffd000/0x3000)=nil, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r0, 0x10, &(0x7f0000000280)={&(0x7f0000000200)=""/115, 0x73}}, 0x10) r3 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x8, 0xa00) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x1a081, 0x0) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, &(0x7f0000000340)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f0000000180)=0x4) shmdt(0x0) 20:13:45 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:45 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}) 20:13:45 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x2, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f00000001c0)={0x0, 0xfe}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x20100, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000040)=""/197) r2 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ff9000/0x4000)=nil) shmat(r2, &(0x7f0000ffd000/0x3000)=nil, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r0, 0x10, &(0x7f0000000280)={&(0x7f0000000200)=""/115, 0x73}}, 0x10) r3 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x8, 0xa00) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x1a081, 0x0) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, &(0x7f0000000340)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f0000000180)=0x4) shmdt(0x0) 20:13:45 executing program 3: socket$can_j1939(0x1d, 0x2, 0x7) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') 20:13:45 executing program 5: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:45 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:13:45 executing program 1: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x2000)=nil, 0x4000) r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r0) shmdt(r0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:45 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 20:13:45 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') 20:13:45 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x2, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f00000001c0)={0x0, 0xfe}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x20100, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000040)=""/197) r2 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ff9000/0x4000)=nil) shmat(r2, &(0x7f0000ffd000/0x3000)=nil, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r0, 0x10, &(0x7f0000000280)={&(0x7f0000000200)=""/115, 0x73}}, 0x10) r3 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x8, 0xa00) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x1a081, 0x0) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, &(0x7f0000000340)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f0000000180)=0x4) shmdt(0x0) 20:13:45 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:45 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 20:13:45 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) 20:13:45 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}) 20:13:45 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 20:13:45 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:45 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 20:13:45 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x2, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f00000001c0)={0x0, 0xfe}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x20100, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000040)=""/197) r2 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ff9000/0x4000)=nil) shmat(r2, &(0x7f0000ffd000/0x3000)=nil, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r0, 0x10, &(0x7f0000000280)={&(0x7f0000000200)=""/115, 0x73}}, 0x10) r3 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x8, 0xa00) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x1a081, 0x0) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, &(0x7f0000000340)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f0000000180)=0x4) shmdt(0x0) 20:13:45 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 20:13:45 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 20:13:46 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 20:13:46 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:46 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 20:13:46 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r2 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r1, 0xffffffffffffffff, 0x7, r2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000340), 0x4) 20:13:46 executing program 1: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x2000)=nil, 0x4000) r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r0) shmdt(r0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:46 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 20:13:46 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 20:13:46 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:46 executing program 0: syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x6000) 20:13:46 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r2 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r1, 0xffffffffffffffff, 0x7, r2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000340), 0x4) 20:13:46 executing program 1: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x2000)=nil, 0x4000) r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r0) shmdt(r0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:46 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 20:13:46 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 20:13:46 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:46 executing program 0: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x2000)=nil, 0x4000) r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r0) shmdt(r0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:46 executing program 3: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x2000)=nil, 0x4000) r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r0) shmdt(r0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x5000) shmdt(0x0) 20:13:46 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x3000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) syz_io_uring_setup(0x2c06, &(0x7f0000000000)={0x0, 0x43a2, 0x8, 0x1, 0x2a0, 0x0, r1}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) shmdt(0x0) r2 = io_uring_setup(0x1587, &(0x7f0000000100)={0x0, 0x4085, 0x20, 0x3, 0x15d}) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x10000000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40800, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x30, r3, 0x8000000) 20:13:46 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r2 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r1, 0xffffffffffffffff, 0x7, r2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000340), 0x4) 20:13:46 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:46 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) 20:13:46 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x6000) 20:13:46 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) shmdt(0x0) 20:13:46 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x3000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) syz_io_uring_setup(0x2c06, &(0x7f0000000000)={0x0, 0x43a2, 0x8, 0x1, 0x2a0, 0x0, r1}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) shmdt(0x0) r2 = io_uring_setup(0x1587, &(0x7f0000000100)={0x0, 0x4085, 0x20, 0x3, 0x15d}) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x10000000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40800, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x30, r3, 0x8000000) 20:13:46 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:46 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:46 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 20:13:46 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) 20:13:46 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x20000084, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:13:46 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x3000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) syz_io_uring_setup(0x2c06, &(0x7f0000000000)={0x0, 0x43a2, 0x8, 0x1, 0x2a0, 0x0, r1}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) shmdt(0x0) r2 = io_uring_setup(0x1587, &(0x7f0000000100)={0x0, 0x4085, 0x20, 0x3, 0x15d}) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x10000000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40800, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x30, r3, 0x8000000) 20:13:46 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x0) 20:13:47 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) 20:13:47 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x0) 20:13:47 executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:47 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) 20:13:47 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x3000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) syz_io_uring_setup(0x2c06, &(0x7f0000000000)={0x0, 0x43a2, 0x8, 0x1, 0x2a0, 0x0, r1}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) shmdt(0x0) r2 = io_uring_setup(0x1587, &(0x7f0000000100)={0x0, 0x4085, 0x20, 0x3, 0x15d}) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x10000000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40800, 0x0) 20:13:47 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x20000084, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:13:47 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) 20:13:47 executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:47 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) 20:13:47 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x20000084, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:13:47 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x0) 20:13:47 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) 20:13:47 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x3000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) syz_io_uring_setup(0x2c06, &(0x7f0000000000)={0x0, 0x43a2, 0x8, 0x1, 0x2a0, 0x0, r1}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) shmdt(0x0) r2 = io_uring_setup(0x1587, &(0x7f0000000100)={0x0, 0x4085, 0x20, 0x3, 0x15d}) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x10000000) 20:13:47 executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:47 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) 20:13:47 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) 20:13:47 executing program 3: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x20000084, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:13:47 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x3000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) syz_io_uring_setup(0x2c06, &(0x7f0000000000)={0x0, 0x43a2, 0x8, 0x1, 0x2a0, 0x0, r1}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) shmdt(0x0) io_uring_setup(0x1587, &(0x7f0000000100)={0x0, 0x4085, 0x20, 0x3, 0x15d}) 20:13:47 executing program 2: io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) 20:13:47 executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) 20:13:47 executing program 3: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x20000084, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:13:47 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}) 20:13:47 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) 20:13:47 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x3000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) syz_io_uring_setup(0x2c06, &(0x7f0000000000)={0x0, 0x43a2, 0x8, 0x1, 0x2a0, 0x0, r1}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) shmdt(0x0) 20:13:47 executing program 2: io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) 20:13:47 executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) 20:13:47 executing program 3: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x20000084, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:13:47 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x3000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) syz_io_uring_setup(0x2c06, &(0x7f0000000000)={0x0, 0x43a2, 0x8, 0x1, 0x2a0, 0x0, r1}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 20:13:47 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) 20:13:47 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 20:13:47 executing program 2: io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) 20:13:47 executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) 20:13:47 executing program 3: socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x20000084, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:13:48 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x3000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x2c06, &(0x7f0000000000)={0x0, 0x43a2, 0x8, 0x1, 0x2a0, 0x0, r1}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 20:13:48 executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:48 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) 20:13:48 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) 20:13:48 executing program 3: socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x20000084, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:13:48 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}) 20:13:48 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x3000) syz_io_uring_setup(0x2c06, &(0x7f0000000000)={0x0, 0x43a2, 0x8, 0x1, 0x2a0}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 20:13:48 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) 20:13:48 executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:48 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) 20:13:48 executing program 3: socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x20000084, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:13:48 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 20:13:48 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) 20:13:48 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) syz_io_uring_setup(0x2c06, &(0x7f0000000000)={0x0, 0x43a2, 0x8, 0x1, 0x2a0}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 20:13:48 executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:48 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 20:13:48 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) 20:13:48 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x20000084, 0x0, &(0x7f00000000c0)) 20:13:48 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x136, 0x0) 20:13:48 executing program 1: shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) syz_io_uring_setup(0x2c06, &(0x7f0000000000)={0x0, 0x43a2, 0x8, 0x1, 0x2a0}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 20:13:48 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) 20:13:48 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 20:13:48 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:48 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x20000084, 0x0, 0x0) 20:13:48 executing program 1: syz_io_uring_setup(0x2c06, &(0x7f0000000000)={0x0, 0x43a2, 0x8, 0x1, 0x2a0}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 20:13:48 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x136, 0x0) 20:13:48 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) 20:13:48 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 20:13:48 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x20000084, 0x0, 0x0) 20:13:48 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:48 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x43a2, 0x8, 0x1, 0x2a0}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 20:13:48 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x136, 0x0) 20:13:48 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x20000084, 0x0, 0x0) 20:13:48 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) 20:13:49 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 20:13:49 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:49 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x43a2, 0x8, 0x1, 0x2a0}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 20:13:49 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x2, 0x221}) 20:13:49 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:49 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) 20:13:49 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 20:13:49 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:49 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:49 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x2, 0x221}) 20:13:49 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x43a2, 0x8, 0x1, 0x2a0}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 20:13:49 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) 20:13:49 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 20:13:49 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x221}) 20:13:49 executing program 1: syz_io_uring_setup(0x2c06, 0x0, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 20:13:49 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) 20:13:49 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:49 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:49 executing program 1: syz_io_uring_setup(0x2c06, 0x0, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 20:13:49 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:49 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) 20:13:49 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x221}) 20:13:49 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) 20:13:49 executing program 1: syz_io_uring_setup(0x2c06, 0x0, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 20:13:49 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) 20:13:49 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:49 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) io_uring_setup(0x136, 0x0) 20:13:49 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x221}) 20:13:49 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) 20:13:49 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) 20:13:49 executing program 1: syz_io_uring_setup(0x2c06, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x2a0}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 20:13:49 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) io_uring_setup(0x136, 0x0) 20:13:50 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) 20:13:50 executing program 1: syz_io_uring_setup(0x2c06, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x2a0}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 20:13:50 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:50 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) 20:13:50 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x221}) 20:13:50 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) io_uring_setup(0x136, 0x0) 20:13:50 executing program 3: r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:50 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:50 executing program 1: syz_io_uring_setup(0x2c06, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x2a0}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 20:13:50 executing program 3: r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:50 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x136, &(0x7f0000000080)) 20:13:50 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) 20:13:50 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x2, 0x221}) 20:13:50 executing program 1: syz_io_uring_setup(0x2c06, &(0x7f0000000000)={0x0, 0x43a2, 0x0, 0x1, 0x2a0}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 20:13:50 executing program 3: r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:50 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, 0x0) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:50 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}) 20:13:50 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x221}) 20:13:50 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x136, &(0x7f0000000080)) 20:13:50 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:50 executing program 1: syz_io_uring_setup(0x2c06, &(0x7f0000000000)={0x0, 0x43a2, 0x0, 0x1, 0x2a0}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 20:13:50 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, 0x0) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:50 executing program 2: syz_io_uring_setup(0x2c06, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x2a0}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 20:13:50 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 20:13:50 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:50 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x221}) 20:13:50 executing program 1: syz_io_uring_setup(0x2c06, &(0x7f0000000000)={0x0, 0x43a2, 0x0, 0x1, 0x2a0}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 20:13:50 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, 0x0) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:50 executing program 2: syz_io_uring_setup(0x2c06, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x2a0}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 20:13:50 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:50 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 20:13:50 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x221}) 20:13:50 executing program 1: syz_io_uring_setup(0x2c06, &(0x7f0000000000)={0x0, 0x43a2, 0x8, 0x0, 0x2a0}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 20:13:50 executing program 2: syz_io_uring_setup(0x2c06, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x2a0}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 20:13:50 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:51 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:51 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x0, 0x221}) 20:13:51 executing program 1: syz_io_uring_setup(0x2c06, &(0x7f0000000000)={0x0, 0x43a2, 0x8}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 20:13:51 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x2a0}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 20:13:51 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) 20:13:51 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:51 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:51 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x0, 0x221}) 20:13:51 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) 20:13:51 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:51 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x2a0}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 20:13:51 executing program 1: syz_io_uring_setup(0x2c06, &(0x7f0000000000)={0x0, 0x43a2, 0x8}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0, &(0x7f00000000c0)) 20:13:51 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:51 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x0, 0x221}) 20:13:51 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, 0x0) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:51 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x2a0}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 20:13:51 executing program 1: syz_io_uring_setup(0x2c06, &(0x7f0000000000)={0x0, 0x43a2, 0x8}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0, &(0x7f00000000c0)) 20:13:51 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) 20:13:51 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x2}) 20:13:51 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x0, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:51 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, 0x0) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:51 executing program 1: syz_io_uring_setup(0x2c06, &(0x7f0000000000)={0x0, 0x43a2, 0x8}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0, &(0x7f00000000c0)) 20:13:51 executing program 2: syz_io_uring_setup(0x2c06, 0x0, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 20:13:51 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) 20:13:51 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:51 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x0, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:51 executing program 1: syz_io_uring_setup(0x2c06, &(0x7f0000000000)={0x0, 0x43a2, 0x8}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), 0x0) 20:13:51 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, 0x0) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:51 executing program 2: syz_io_uring_setup(0x2c06, 0x0, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 20:13:51 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) 20:13:51 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:52 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x0, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:52 executing program 1: syz_io_uring_setup(0x2c06, &(0x7f0000000000)={0x0, 0x43a2, 0x8}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), 0x0) 20:13:52 executing program 2: syz_io_uring_setup(0x2c06, 0x0, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 20:13:52 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}) 20:13:52 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:52 executing program 1: syz_io_uring_setup(0x2c06, &(0x7f0000000000)={0x0, 0x43a2, 0x8}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), 0x0) 20:13:52 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:52 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x0, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:52 executing program 2: syz_io_uring_setup(0x2c06, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x2a0}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 20:13:52 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 20:13:52 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) 20:13:52 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:52 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x2, 0x221}) 20:13:52 executing program 2: syz_io_uring_setup(0x2c06, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x2a0}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 20:13:52 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x0, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:52 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) 20:13:52 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}) 20:13:52 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x2, 0x221}) 20:13:52 executing program 2: syz_io_uring_setup(0x2c06, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x2a0}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 20:13:52 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x0, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:52 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) 20:13:52 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:52 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 20:13:52 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x2, 0x221}) 20:13:52 executing program 2: syz_io_uring_setup(0x2c06, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x0, 0x2a0}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 20:13:52 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:52 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 20:13:52 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) 20:13:52 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x0, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:52 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:52 executing program 5: r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:52 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 20:13:52 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x2, 0x221}) 20:13:52 executing program 2: syz_io_uring_setup(0x2c06, &(0x7f0000000000)={0x0, 0x0, 0x8}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 20:13:53 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x0, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:53 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:53 executing program 5: r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:53 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) 20:13:53 executing program 2: syz_io_uring_setup(0x2c06, &(0x7f0000000000)={0x0, 0x0, 0x8}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0, &(0x7f00000000c0)) 20:13:53 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x2, 0x221}) 20:13:53 executing program 5: r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:53 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:53 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x0, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:53 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) 20:13:53 executing program 2: syz_io_uring_setup(0x2c06, &(0x7f0000000000)={0x0, 0x0, 0x8}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0, &(0x7f00000000c0)) 20:13:53 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x2, 0x221}) 20:13:53 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x0, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:53 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) 20:13:53 executing program 5: r0 = io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:53 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:53 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x0, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:53 executing program 2: syz_io_uring_setup(0x2c06, &(0x7f0000000000)={0x0, 0x0, 0x8}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0, &(0x7f00000000c0)) 20:13:53 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x0, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:53 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x0, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:53 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) 20:13:53 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:53 executing program 5: r0 = io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:53 executing program 2: syz_io_uring_setup(0x2c06, &(0x7f0000000000)={0x0, 0x0, 0x8}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), 0x0) 20:13:53 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) 20:13:53 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x0, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:53 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x0, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:53 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}) 20:13:53 executing program 2: syz_io_uring_setup(0x2c06, &(0x7f0000000000)={0x0, 0x0, 0x8}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), 0x0) 20:13:53 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:53 executing program 5: r0 = io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:53 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 20:13:53 executing program 2: syz_io_uring_setup(0x2c06, &(0x7f0000000000)={0x0, 0x0, 0x8}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), 0x0) 20:13:54 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:54 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:54 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x0, 0x2, 0x221}) 20:13:54 executing program 5: r0 = io_uring_setup(0x136, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:54 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:54 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x0, 0x2, 0x221}) 20:13:54 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}) 20:13:54 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}) 20:13:54 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:54 executing program 5: r0 = io_uring_setup(0x136, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:54 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, 0x0) 20:13:54 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x0, 0x2, 0x221}) 20:13:54 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 20:13:54 executing program 2: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:54 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:54 executing program 5: r0 = io_uring_setup(0x136, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:54 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 20:13:54 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, 0x0) 20:13:54 executing program 1: r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x0, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:54 executing program 2: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:54 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:54 executing program 5: r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:54 executing program 1: r0 = io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x806e, 0x0, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:54 executing program 5: r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:54 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, 0x0) 20:13:54 executing program 2: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:54 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:54 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 20:13:54 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, 0x0) 20:13:54 executing program 1: r0 = io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x806e, 0x0, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:54 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:54 executing program 5: r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:54 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 20:13:54 executing program 2: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, 0x0) 20:13:55 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:55 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, 0x0) 20:13:55 executing program 1: r0 = io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x806e, 0x0, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:55 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 20:13:55 executing program 2: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, 0x0) 20:13:55 executing program 5: r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x0, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:55 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:55 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 20:13:55 executing program 2: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, 0x0) 20:13:55 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, 0x0) 20:13:55 executing program 1: r0 = io_uring_setup(0x136, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:55 executing program 5: r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x0, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:55 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x221}) 20:13:55 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:55 executing program 5: r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x0, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:55 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) 20:13:55 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 20:13:55 executing program 1: r0 = io_uring_setup(0x136, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:55 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, 0x0) 20:13:55 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) 20:13:55 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x221}) 20:13:55 executing program 5: r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x2}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:55 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) 20:13:55 executing program 1: r0 = io_uring_setup(0x136, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:55 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, 0x0) 20:13:55 executing program 1: r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:55 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) 20:13:55 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x221}) 20:13:55 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) 20:13:55 executing program 5: r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x2}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:55 executing program 1: r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:56 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, 0x0) 20:13:56 executing program 0: r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, 0x0) 20:13:56 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) 20:13:56 executing program 2: io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x221}) 20:13:56 executing program 5: r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x2}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:56 executing program 1: r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:56 executing program 0: r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, 0x0) 20:13:56 executing program 2: io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x221}) 20:13:56 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) 20:13:56 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)) 20:13:56 executing program 5: io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:56 executing program 1: r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:56 executing program 0: r0 = io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, 0x0) 20:13:56 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)) 20:13:56 executing program 2: io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x221}) 20:13:56 executing program 5: io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:56 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}) 20:13:56 executing program 0: r0 = io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, 0x0) 20:13:56 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)) 20:13:56 executing program 5: io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:56 executing program 1: r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:56 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x221}) 20:13:56 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 20:13:56 executing program 0: r0 = io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, 0x0) 20:13:56 executing program 3: r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:56 executing program 1: r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:56 executing program 5: r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, 0x0) 20:13:56 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x221}) 20:13:56 executing program 0: r0 = io_uring_setup(0x136, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, 0x0) 20:13:56 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 20:13:56 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, 0x0) 20:13:56 executing program 1: r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:57 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) 20:13:57 executing program 5: r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, 0x0) 20:13:57 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x221}) 20:13:57 executing program 0: r0 = io_uring_setup(0x136, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, 0x0) 20:13:57 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:57 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) 20:13:57 executing program 1: r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:57 executing program 0: r0 = io_uring_setup(0x136, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, 0x0) 20:13:57 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x136, 0x0) 20:13:57 executing program 5: r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, 0x0) 20:13:57 executing program 1: io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:57 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x20000084, 0x0, 0x0) 20:13:57 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x136, 0x0) 20:13:57 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) 20:13:57 executing program 5: r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)) 20:13:57 executing program 0: r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, 0x0) 20:13:57 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x136, 0x0) 20:13:57 executing program 3: socket$can_j1939(0x1d, 0x2, 0x7) r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:57 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x136, &(0x7f0000000080)) 20:13:57 executing program 1: io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) 20:13:57 executing program 3: socket$can_j1939(0x1d, 0x2, 0x7) r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:57 executing program 0: r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, 0x0) 20:13:57 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) 20:13:57 executing program 5: r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)) 20:13:57 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x136, &(0x7f0000000080)) 20:13:57 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:57 executing program 0: r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, 0x0) 20:13:57 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) 20:13:57 executing program 3: socket$can_j1939(0x1d, 0x2, 0x7) r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xe815}) 20:13:57 executing program 5: r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)) 20:13:57 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x136, &(0x7f0000000080)) 20:13:57 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) 20:13:57 executing program 0: r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x0, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, 0x0) 20:13:57 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}) 20:13:58 executing program 3: socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) 20:13:58 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) 20:13:58 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}) 20:13:58 executing program 0: r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x0, 0x2, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, 0x0) 20:13:58 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x3000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) syz_io_uring_setup(0x2c06, &(0x7f0000000000)={0x0, 0x43a2, 0x8, 0x1, 0x2a0, 0x0, r1}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) shmdt(0x0) r2 = io_uring_setup(0x1587, &(0x7f0000000100)={0x0, 0x4085, 0x20, 0x3, 0x15d}) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x10000000) 20:13:58 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 20:13:58 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffd000/0x1000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000008, 0x1010, 0xffffffffffffffff, 0x10000000) mmap$dsp(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ff9000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000fff000/0x1000)=nil) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x501080, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x1, 0x0) socketpair(0x25, 0x6, 0x3, &(0x7f0000000140)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="88000000", @ANYRES16=r4, @ANYBLOB="000427bd7000fbdbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b00ff0f00000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00080000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000500000019b28769ae31a5ae0c90dca7fabce4f169b89ac28c4f51bfca7349e960c2983cd860b4f41ecbd047535a6194c1e2558d08d1c381bf798824412db32db0bd1bf5b8506473beec6548317b4fc7ad1062354119e2936a56a138b1f6153dbbf6e21cd3060e407ecccb270265ad9b"], 0x88}, 0x1, 0x0, 0x0, 0x74804}, 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000000)={0x7f, 0x75d765f5}) r5 = shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ff9000/0x1000)=nil) shmat(r5, &(0x7f0000ff1000/0x3000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x1000) shmdt(0x0) epoll_create1(0x80000) 20:13:58 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffd000/0x1000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000008, 0x1010, 0xffffffffffffffff, 0x10000000) mmap$dsp(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ff9000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000fff000/0x1000)=nil) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x501080, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x1, 0x0) socketpair(0x25, 0x6, 0x3, &(0x7f0000000140)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="88000000", @ANYRES16=r4, @ANYBLOB="000427bd7000fbdbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b00ff0f00000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00080000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000500000019b28769ae31a5ae0c90dca7fabce4f169b89ac28c4f51bfca7349e960c2983cd860b4f41ecbd047535a6194c1e2558d08d1c381bf798824412db32db0bd1bf5b8506473beec6548317b4fc7ad1062354119e2936a56a138b1f6153dbbf6e21cd3060e407ecccb270265ad9b"], 0x88}, 0x1, 0x0, 0x0, 0x74804}, 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000000)={0x7f, 0x75d765f5}) r5 = shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ff9000/0x1000)=nil) shmat(r5, &(0x7f0000ff1000/0x3000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x1000) shmdt(0x0) epoll_create1(0x80000) 20:13:58 executing program 3: socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) 20:13:58 executing program 0: r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x0, 0x0, 0x221}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, 0x0) 20:13:58 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}) 20:13:58 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffd000/0x1000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000008, 0x1010, 0xffffffffffffffff, 0x10000000) mmap$dsp(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ff9000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000fff000/0x1000)=nil) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x501080, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x1, 0x0) socketpair(0x25, 0x6, 0x3, &(0x7f0000000140)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="88000000", @ANYRES16=r4, @ANYBLOB="000427bd7000fbdbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b00ff0f00000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00080000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000500000019b28769ae31a5ae0c90dca7fabce4f169b89ac28c4f51bfca7349e960c2983cd860b4f41ecbd047535a6194c1e2558d08d1c381bf798824412db32db0bd1bf5b8506473beec6548317b4fc7ad1062354119e2936a56a138b1f6153dbbf6e21cd3060e407ecccb270265ad9b"], 0x88}, 0x1, 0x0, 0x0, 0x74804}, 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000000)={0x7f, 0x75d765f5}) r5 = shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ff9000/0x1000)=nil) shmat(r5, &(0x7f0000ff1000/0x3000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x1000) shmdt(0x0) epoll_create1(0x80000) 20:13:58 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffd000/0x1000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000008, 0x1010, 0xffffffffffffffff, 0x10000000) mmap$dsp(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ff9000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000fff000/0x1000)=nil) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x501080, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x1, 0x0) socketpair(0x25, 0x6, 0x3, &(0x7f0000000140)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="88000000", @ANYRES16=r4, @ANYBLOB="000427bd7000fbdbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b00ff0f00000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00080000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000500000019b28769ae31a5ae0c90dca7fabce4f169b89ac28c4f51bfca7349e960c2983cd860b4f41ecbd047535a6194c1e2558d08d1c381bf798824412db32db0bd1bf5b8506473beec6548317b4fc7ad1062354119e2936a56a138b1f6153dbbf6e21cd3060e407ecccb270265ad9b"], 0x88}, 0x1, 0x0, 0x0, 0x74804}, 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000000)={0x7f, 0x75d765f5}) r5 = shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ff9000/0x1000)=nil) shmat(r5, &(0x7f0000ff1000/0x3000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x1000) shmdt(0x0) epoll_create1(0x80000) 20:13:58 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffd000/0x1000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000008, 0x1010, 0xffffffffffffffff, 0x10000000) mmap$dsp(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ff9000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000fff000/0x1000)=nil) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x501080, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x1, 0x0) socketpair(0x25, 0x6, 0x3, &(0x7f0000000140)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="88000000", @ANYRES16=r4, @ANYBLOB="000427bd7000fbdbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b00ff0f00000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00080000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000500000019b28769ae31a5ae0c90dca7fabce4f169b89ac28c4f51bfca7349e960c2983cd860b4f41ecbd047535a6194c1e2558d08d1c381bf798824412db32db0bd1bf5b8506473beec6548317b4fc7ad1062354119e2936a56a138b1f6153dbbf6e21cd3060e407ecccb270265ad9b"], 0x88}, 0x1, 0x0, 0x0, 0x74804}, 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000000)={0x7f, 0x75d765f5}) r5 = shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ff9000/0x1000)=nil) shmat(r5, &(0x7f0000ff1000/0x3000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x1000) shmdt(0x0) epoll_create1(0x80000) 20:13:58 executing program 3: socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x10, 0x2, 0x221}) 20:13:58 executing program 0: r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, 0x0) 20:13:58 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 20:13:58 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x6000) 20:13:58 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffd000/0x1000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000008, 0x1010, 0xffffffffffffffff, 0x10000000) mmap$dsp(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ff9000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000fff000/0x1000)=nil) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x501080, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x1, 0x0) socketpair(0x25, 0x6, 0x3, &(0x7f0000000140)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="88000000", @ANYRES16=r4, @ANYBLOB="000427bd7000fbdbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b00ff0f00000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00080000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000500000019b28769ae31a5ae0c90dca7fabce4f169b89ac28c4f51bfca7349e960c2983cd860b4f41ecbd047535a6194c1e2558d08d1c381bf798824412db32db0bd1bf5b8506473beec6548317b4fc7ad1062354119e2936a56a138b1f6153dbbf6e21cd3060e407ecccb270265ad9b"], 0x88}, 0x1, 0x0, 0x0, 0x74804}, 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000000)={0x7f, 0x75d765f5}) r5 = shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ff9000/0x1000)=nil) shmat(r5, &(0x7f0000ff1000/0x3000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x1000) shmdt(0x0) epoll_create1(0x80000) 20:13:58 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffd000/0x1000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000008, 0x1010, 0xffffffffffffffff, 0x10000000) mmap$dsp(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ff9000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000fff000/0x1000)=nil) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x501080, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x1, 0x0) socketpair(0x25, 0x6, 0x3, &(0x7f0000000140)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="88000000", @ANYRES16=r4, @ANYBLOB="000427bd7000fbdbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b00ff0f00000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00080000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000500000019b28769ae31a5ae0c90dca7fabce4f169b89ac28c4f51bfca7349e960c2983cd860b4f41ecbd047535a6194c1e2558d08d1c381bf798824412db32db0bd1bf5b8506473beec6548317b4fc7ad1062354119e2936a56a138b1f6153dbbf6e21cd3060e407ecccb270265ad9b"], 0x88}, 0x1, 0x0, 0x0, 0x74804}, 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000000)={0x7f, 0x75d765f5}) r5 = shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ff9000/0x1000)=nil) shmat(r5, &(0x7f0000ff1000/0x3000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x1000) shmdt(0x0) epoll_create1(0x80000) 20:13:58 executing program 0: r0 = io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, 0x0) 20:13:58 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(0x0) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x2, 0x0) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x6000) 20:13:58 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 20:13:58 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 20:13:58 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffd000/0x1000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000008, 0x1010, 0xffffffffffffffff, 0x10000000) mmap$dsp(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ff9000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000fff000/0x1000)=nil) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x501080, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x1, 0x0) socketpair(0x25, 0x6, 0x3, &(0x7f0000000140)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="88000000", @ANYRES16=r4, @ANYBLOB="000427bd7000fbdbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b00ff0f00000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00080000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000500000019b28769ae31a5ae0c90dca7fabce4f169b89ac28c4f51bfca7349e960c2983cd860b4f41ecbd047535a6194c1e2558d08d1c381bf798824412db32db0bd1bf5b8506473beec6548317b4fc7ad1062354119e2936a56a138b1f6153dbbf6e21cd3060e407ecccb270265ad9b"], 0x88}, 0x1, 0x0, 0x0, 0x74804}, 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000000)={0x7f, 0x75d765f5}) r5 = shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ff9000/0x1000)=nil) shmat(r5, &(0x7f0000ff1000/0x3000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x1000) shmdt(0x0) 20:13:58 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:13:58 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:13:58 executing program 0: io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) 20:13:58 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 20:13:58 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffd000/0x1000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000008, 0x1010, 0xffffffffffffffff, 0x10000000) mmap$dsp(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ff9000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000fff000/0x1000)=nil) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x501080, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000900), 0x1, 0x0) socketpair(0x25, 0x6, 0x3, &(0x7f0000000140)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="88000000", @ANYRES16=r4, @ANYBLOB="000427bd7000fbdbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b00ff0f00000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00080000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000500000019b28769ae31a5ae0c90dca7fabce4f169b89ac28c4f51bfca7349e960c2983cd860b4f41ecbd047535a6194c1e2558d08d1c381bf798824412db32db0bd1bf5b8506473beec6548317b4fc7ad1062354119e2936a56a138b1f6153dbbf6e21cd3060e407ecccb270265ad9b"], 0x88}, 0x1, 0x0, 0x0, 0x74804}, 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000000)={0x7f, 0x75d765f5}) r5 = shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ff9000/0x1000)=nil) shmat(r5, &(0x7f0000ff1000/0x3000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x1000) 20:13:58 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:13:58 executing program 0: io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) 20:13:59 executing program 3: io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) 20:13:59 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:13:59 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:13:59 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) 20:13:59 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffd000/0x1000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000008, 0x1010, 0xffffffffffffffff, 0x10000000) mmap$dsp(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ff9000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000fff000/0x1000)=nil) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x501080, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x1, 0x0) socketpair(0x25, 0x6, 0x3, &(0x7f0000000140)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="88000000", @ANYRES16=r3, @ANYBLOB="000427bd7000fbdbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b00ff0f00000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00080000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000500000019b28769ae31a5ae0c90dca7fabce4f169b89ac28c4f51bfca7349e960c2983cd860b4f41ecbd047535a6194c1e2558d08d1c381bf798824412db32db0bd1bf5b8506473beec6548317b4fc7ad1062354119e2936a56a138b1f6153dbbf6e21cd3060e407ecccb270265ad9b"], 0x88}, 0x1, 0x0, 0x0, 0x74804}, 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000000)={0x7f, 0x75d765f5}) r4 = shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ff9000/0x1000)=nil) shmat(r4, &(0x7f0000ff1000/0x3000)=nil, 0x1000) 20:13:59 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:13:59 executing program 0 (fault-call:0 fault-nth:0): io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) 20:13:59 executing program 3: io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) 20:13:59 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:13:59 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) 20:13:59 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffd000/0x1000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000008, 0x1010, 0xffffffffffffffff, 0x10000000) mmap$dsp(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ff9000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000fff000/0x1000)=nil) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x501080, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x1, 0x0) socketpair(0x25, 0x6, 0x3, &(0x7f0000000140)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="88000000", @ANYRES16=r3, @ANYBLOB="000427bd7000fbdbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b00ff0f00000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00080000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000500000019b28769ae31a5ae0c90dca7fabce4f169b89ac28c4f51bfca7349e960c2983cd860b4f41ecbd047535a6194c1e2558d08d1c381bf798824412db32db0bd1bf5b8506473beec6548317b4fc7ad1062354119e2936a56a138b1f6153dbbf6e21cd3060e407ecccb270265ad9b"], 0x88}, 0x1, 0x0, 0x0, 0x74804}, 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000000)={0x7f, 0x75d765f5}) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ff9000/0x1000)=nil) [ 2234.603516][ T7467] FAULT_INJECTION: forcing a failure. [ 2234.603516][ T7467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2234.663776][ T7467] CPU: 0 PID: 7467 Comm: syz-executor.0 Not tainted 5.11.0-rc3-syzkaller #0 [ 2234.672534][ T7467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2234.682621][ T7467] Call Trace: [ 2234.685932][ T7467] dump_stack+0x107/0x163 [ 2234.690302][ T7467] should_fail.cold+0x5/0xa [ 2234.694842][ T7467] _copy_from_user+0x2c/0x180 [ 2234.699554][ T7467] io_uring_setup+0xa3/0x38e0 [ 2234.704348][ T7467] ? io_wq_submit_work+0x6f0/0x6f0 [ 2234.709491][ T7467] ? wait_for_completion_io+0x260/0x260 [ 2234.715076][ T7467] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2234.721355][ T7467] ? vfs_write+0x18e/0xa30 [ 2234.725805][ T7467] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2234.732158][ T7467] ? fput+0x2a/0x50 [ 2234.736006][ T7467] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2234.741933][ T7467] do_syscall_64+0x2d/0x70 [ 2234.746383][ T7467] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2234.752310][ T7467] RIP: 0033:0x45e219 20:13:59 executing program 3 (fault-call:1 fault-nth:0): socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x221}) 20:13:59 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:13:59 executing program 2: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 2234.756227][ T7467] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2234.775867][ T7467] RSP: 002b:00007f9188d28c68 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 2234.784320][ T7467] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2234.792316][ T7467] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000136 [ 2234.800397][ T7467] RBP: 00007f9188d28ca0 R08: 0000000000000000 R09: 0000000000000000 20:13:59 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffd000/0x1000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000008, 0x1010, 0xffffffffffffffff, 0x10000000) mmap$dsp(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ff9000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000fff000/0x1000)=nil) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x501080, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000900), 0x1, 0x0) socketpair(0x25, 0x6, 0x3, &(0x7f0000000140)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="88000000", @ANYRES16=r3, @ANYBLOB="000427bd7000fbdbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b00ff0f00000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00080000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000500000019b28769ae31a5ae0c90dca7fabce4f169b89ac28c4f51bfca7349e960c2983cd860b4f41ecbd047535a6194c1e2558d08d1c381bf798824412db32db0bd1bf5b8506473beec6548317b4fc7ad1062354119e2936a56a138b1f6153dbbf6e21cd3060e407ecccb270265ad9b"], 0x88}, 0x1, 0x0, 0x0, 0x74804}, 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000000)={0x7f, 0x75d765f5}) 20:13:59 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) [ 2234.808373][ T7467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2234.816337][ T7467] R13: 00000000016afb5f R14: 00007f9188d299c0 R15: 000000000119bf8c 20:13:59 executing program 0 (fault-call:0 fault-nth:1): io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) 20:13:59 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:13:59 executing program 2: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 2234.935905][ T7490] FAULT_INJECTION: forcing a failure. [ 2234.935905][ T7490] name fail_usercopy, interval 1, probability 0, space 0, times 0 20:13:59 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) [ 2235.021209][ T7490] CPU: 0 PID: 7490 Comm: syz-executor.3 Not tainted 5.11.0-rc3-syzkaller #0 [ 2235.029970][ T7490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2235.040052][ T7490] Call Trace: [ 2235.043354][ T7490] dump_stack+0x107/0x163 [ 2235.047736][ T7490] should_fail.cold+0x5/0xa [ 2235.052278][ T7490] _copy_from_user+0x2c/0x180 [ 2235.056993][ T7490] io_uring_setup+0xa3/0x38e0 [ 2235.061725][ T7490] ? io_wq_submit_work+0x6f0/0x6f0 20:13:59 executing program 2: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 2235.066869][ T7490] ? wait_for_completion_io+0x260/0x260 [ 2235.072451][ T7490] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2235.078731][ T7490] ? vfs_write+0x18e/0xa30 [ 2235.083189][ T7490] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2235.089470][ T7490] ? fput+0x2a/0x50 [ 2235.093327][ T7490] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2235.099265][ T7490] do_syscall_64+0x2d/0x70 [ 2235.103715][ T7490] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2235.109656][ T7490] RIP: 0033:0x45e219 20:13:59 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) 20:13:59 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 2235.113575][ T7490] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2235.133220][ T7490] RSP: 002b:00007f137056dc68 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 2235.141675][ T7490] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 2235.149676][ T7490] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000136 [ 2235.157768][ T7490] RBP: 00007f137056dca0 R08: 0000000000000000 R09: 0000000000000000 [ 2235.165768][ T7490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2235.173883][ T7490] R13: 00000000016afb5f R14: 00007f137056e9c0 R15: 000000000119bf8c [ 2235.239283][ T7502] FAULT_INJECTION: forcing a failure. [ 2235.239283][ T7502] name failslab, interval 1, probability 0, space 0, times 0 [ 2235.287007][ T7502] CPU: 0 PID: 7502 Comm: syz-executor.0 Not tainted 5.11.0-rc3-syzkaller #0 [ 2235.295753][ T7502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2235.305838][ T7502] Call Trace: [ 2235.309144][ T7502] dump_stack+0x107/0x163 [ 2235.313517][ T7502] should_fail.cold+0x5/0xa [ 2235.318060][ T7502] ? io_uring_setup+0x1e82/0x38e0 [ 2235.323115][ T7502] ? io_uring_setup+0x1e82/0x38e0 [ 2235.328175][ T7502] should_failslab+0x5/0x10 [ 2235.332719][ T7502] kmem_cache_alloc_trace+0x55/0x360 [ 2235.338054][ T7502] io_uring_setup+0x1e82/0x38e0 [ 2235.342957][ T7502] ? io_wq_submit_work+0x6f0/0x6f0 [ 2235.348094][ T7502] ? wait_for_completion_io+0x260/0x260 [ 2235.353663][ T7502] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2235.359574][ T7502] do_syscall_64+0x2d/0x70 [ 2235.363987][ T7502] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2235.369983][ T7502] RIP: 0033:0x45e219 [ 2235.373872][ T7502] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2235.393487][ T7502] RSP: 002b:00007f9188d28c68 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 2235.401964][ T7502] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2235.409937][ T7502] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000136 [ 2235.417918][ T7502] RBP: 00007f9188d28ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2235.425897][ T7502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2235.433877][ T7502] R13: 00000000016afb5f R14: 00007f9188d299c0 R15: 000000000119bf8c 20:14:00 executing program 3 (fault-call:1 fault-nth:1): socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x221}) 20:14:00 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffd000/0x1000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000008, 0x1010, 0xffffffffffffffff, 0x10000000) mmap$dsp(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ff9000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000fff000/0x1000)=nil) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x501080, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x1, 0x0) socketpair(0x25, 0x6, 0x3, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="88000000", @ANYRES16=r2, @ANYBLOB="000427bd7000fbdbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b00ff0f00000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00080000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000500000019b28769ae31a5ae0c90dca7fabce4f169b89ac28c4f51bfca7349e960c2983cd860b4f41ecbd047535a6194c1e2558d08d1c381bf798824412db32db0bd1bf5b8506473beec6548317b4fc7ad1062354119e2936a56a138b1f6153dbbf6e21cd3060e407ecccb270265ad9b"], 0x88}, 0x1, 0x0, 0x0, 0x74804}, 0x1) 20:14:00 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}) 20:14:00 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:14:00 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:14:00 executing program 0 (fault-call:0 fault-nth:2): io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) 20:14:00 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 2235.598921][ T7515] FAULT_INJECTION: forcing a failure. [ 2235.598921][ T7515] name failslab, interval 1, probability 0, space 0, times 0 [ 2235.663907][ T7515] CPU: 0 PID: 7515 Comm: syz-executor.3 Not tainted 5.11.0-rc3-syzkaller #0 [ 2235.672655][ T7515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2235.682741][ T7515] Call Trace: [ 2235.686042][ T7515] dump_stack+0x107/0x163 [ 2235.690417][ T7515] should_fail.cold+0x5/0xa [ 2235.694953][ T7515] ? io_uring_setup+0x1e82/0x38e0 [ 2235.699201][ T7517] FAULT_INJECTION: forcing a failure. [ 2235.699201][ T7517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2235.700028][ T7515] ? io_uring_setup+0x1e82/0x38e0 [ 2235.700066][ T7515] should_failslab+0x5/0x10 [ 2235.700097][ T7515] kmem_cache_alloc_trace+0x55/0x360 [ 2235.727988][ T7515] io_uring_setup+0x1e82/0x38e0 [ 2235.732872][ T7515] ? io_wq_submit_work+0x6f0/0x6f0 [ 2235.738027][ T7515] ? wait_for_completion_io+0x260/0x260 [ 2235.743640][ T7515] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2235.749559][ T7515] do_syscall_64+0x2d/0x70 [ 2235.753986][ T7515] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2235.759905][ T7515] RIP: 0033:0x45e219 [ 2235.763802][ T7515] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2235.783414][ T7515] RSP: 002b:00007f137056dc68 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 2235.791838][ T7515] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 2235.799916][ T7515] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000136 [ 2235.807903][ T7515] RBP: 00007f137056dca0 R08: 0000000000000000 R09: 0000000000000000 [ 2235.815877][ T7515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2235.823867][ T7515] R13: 00000000016afb5f R14: 00007f137056e9c0 R15: 000000000119bf8c [ 2235.831871][ T7517] CPU: 1 PID: 7517 Comm: syz-executor.0 Not tainted 5.11.0-rc3-syzkaller #0 [ 2235.840578][ T7517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2235.850657][ T7517] Call Trace: [ 2235.855412][ T7517] dump_stack+0x107/0x163 [ 2235.859929][ T7517] should_fail.cold+0x5/0xa 20:14:00 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:14:00 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffd000/0x1000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000008, 0x1010, 0xffffffffffffffff, 0x10000000) mmap$dsp(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ff9000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000fff000/0x1000)=nil) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x501080, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x1, 0x0) socketpair(0x25, 0x6, 0x3, &(0x7f0000000140)) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0)='devlink\x00') [ 2235.864595][ T7517] _copy_from_user+0x2c/0x180 [ 2235.869314][ T7517] kstrtouint_from_user+0xb5/0x240 [ 2235.875813][ T7517] ? kstrtou8_from_user+0x210/0x210 [ 2235.882301][ T7517] proc_fail_nth_write+0x79/0x220 [ 2235.888793][ T7517] ? proc_task_getattr+0x1e0/0x1e0 [ 2235.894027][ T7517] ? proc_task_getattr+0x1e0/0x1e0 [ 2235.900308][ T7517] vfs_write+0x28e/0xa30 [ 2235.905276][ T7517] ksys_write+0x12d/0x250 [ 2235.909761][ T7517] ? __ia32_sys_read+0xb0/0xb0 [ 2235.915626][ T7517] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2235.922447][ T7517] do_syscall_64+0x2d/0x70 [ 2235.927315][ T7517] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2235.933916][ T7517] RIP: 0033:0x417ab1 [ 2235.938313][ T7517] Code: 75 14 b8 01 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 64 1b 00 00 c3 48 83 ec 08 e8 ca fc ff ff 48 89 04 24 b8 01 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 13 fd ff ff 48 89 d0 48 83 c4 08 48 3d 01 20:14:00 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) [ 2235.958059][ T7517] RSP: 002b:00007f9188d28c70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2235.967738][ T7517] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000417ab1 [ 2235.975743][ T7517] RDX: 0000000000000001 RSI: 00007f9188d28cb0 RDI: 0000000000000003 [ 2235.984657][ T7517] RBP: 00007f9188d28ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2235.993683][ T7517] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2236.002537][ T7517] R13: 00000000016afb5f R14: 00007f9188d299c0 R15: 000000000119bf8c 20:14:00 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:14:00 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x3, 0x0, &(0x7f00000000c0)) 20:14:00 executing program 3 (fault-call:1 fault-nth:2): socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x221}) 20:14:00 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}) 20:14:00 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffd000/0x1000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000008, 0x1010, 0xffffffffffffffff, 0x10000000) mmap$dsp(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ff9000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000fff000/0x1000)=nil) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x501080, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x1, 0x0) socketpair(0x25, 0x6, 0x3, &(0x7f0000000140)) 20:14:00 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 20:14:01 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 2236.316959][ T7536] FAULT_INJECTION: forcing a failure. [ 2236.316959][ T7536] name failslab, interval 1, probability 0, space 0, times 0 [ 2236.373257][ T7536] CPU: 1 PID: 7536 Comm: syz-executor.3 Not tainted 5.11.0-rc3-syzkaller #0 [ 2236.382000][ T7536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2236.392083][ T7536] Call Trace: [ 2236.395384][ T7536] dump_stack+0x107/0x163 [ 2236.399745][ T7536] should_fail.cold+0x5/0xa [ 2236.404351][ T7536] ? io_uring_setup+0x506/0x38e0 [ 2236.409426][ T7536] should_failslab+0x5/0x10 [ 2236.414077][ T7536] kmem_cache_alloc+0x5b/0x440 [ 2236.418884][ T7536] io_uring_setup+0x506/0x38e0 [ 2236.423700][ T7536] ? io_wq_submit_work+0x6f0/0x6f0 [ 2236.429205][ T7536] ? wait_for_completion_io+0x260/0x260 [ 2236.434810][ T7536] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2236.440838][ T7536] do_syscall_64+0x2d/0x70 [ 2236.445284][ T7536] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2236.451213][ T7536] RIP: 0033:0x45e219 [ 2236.455136][ T7536] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2236.476150][ T7536] RSP: 002b:00007f137056dc68 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 2236.484608][ T7536] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 2236.492608][ T7536] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000136 [ 2236.500612][ T7536] RBP: 00007f137056dca0 R08: 0000000000000000 R09: 0000000000000000 [ 2236.508615][ T7536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 20:14:01 executing program 0: io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) 20:14:01 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x3, 0x0, &(0x7f00000000c0)) 20:14:01 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffd000/0x1000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000008, 0x1010, 0xffffffffffffffff, 0x10000000) mmap$dsp(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ff9000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000fff000/0x1000)=nil) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x501080, 0x0) socketpair(0x25, 0x6, 0x3, &(0x7f0000000140)) 20:14:01 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x2, 0x0, &(0x7f00000000c0)) [ 2236.516611][ T7536] R13: 00000000016afb5f R14: 00007f137056e9c0 R15: 000000000119bf8c 20:14:01 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 20:14:01 executing program 3 (fault-call:1 fault-nth:3): socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x221}) 20:14:01 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x2, 0x0, &(0x7f00000000c0)) 20:14:01 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x3, 0x0, &(0x7f00000000c0)) 20:14:01 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffd000/0x1000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000008, 0x1010, 0xffffffffffffffff, 0x10000000) mmap$dsp(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ff9000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000fff000/0x1000)=nil) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socketpair(0x25, 0x6, 0x3, &(0x7f0000000140)) 20:14:01 executing program 0: io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x8025}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) [ 2236.773477][ T7556] FAULT_INJECTION: forcing a failure. [ 2236.773477][ T7556] name failslab, interval 1, probability 0, space 0, times 0 [ 2236.835991][ T7556] CPU: 0 PID: 7556 Comm: syz-executor.3 Not tainted 5.11.0-rc3-syzkaller #0 [ 2236.844739][ T7556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2236.854830][ T7556] Call Trace: [ 2236.858132][ T7556] dump_stack+0x107/0x163 [ 2236.862518][ T7556] should_fail.cold+0x5/0xa [ 2236.867049][ T7556] ? io_uring_setup+0x5cc/0x38e0 [ 2236.872025][ T7556] ? io_uring_setup+0x5cc/0x38e0 [ 2236.876993][ T7556] should_failslab+0x5/0x10 [ 2236.881529][ T7556] __kmalloc+0x72/0x3e0 [ 2236.885718][ T7556] io_uring_setup+0x5cc/0x38e0 [ 2236.890550][ T7556] ? io_wq_submit_work+0x6f0/0x6f0 [ 2236.896849][ T7556] ? wait_for_completion_io+0x260/0x260 [ 2236.903177][ T7556] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2236.909795][ T7556] do_syscall_64+0x2d/0x70 [ 2236.914296][ T7556] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2236.920672][ T7556] RIP: 0033:0x45e219 [ 2236.925002][ T7556] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2236.945816][ T7556] RSP: 002b:00007f137056dc68 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 2236.954625][ T7556] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 2236.963410][ T7556] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000136 [ 2236.972120][ T7556] RBP: 00007f137056dca0 R08: 0000000000000000 R09: 0000000000000000 20:14:01 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x3, &(0x7f0000000080), 0x0) 20:14:01 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x2, 0x0, &(0x7f00000000c0)) 20:14:01 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 20:14:01 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffd000/0x1000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000008, 0x1010, 0xffffffffffffffff, 0x10000000) mmap$dsp(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ff9000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000fff000/0x1000)=nil) socketpair(0x25, 0x6, 0x3, &(0x7f0000000140)) [ 2236.980960][ T7556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 2236.989705][ T7556] R13: 00000000016afb5f R14: 00007f137056e9c0 R15: 000000000119bf8c 20:14:01 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x3, &(0x7f0000000080), 0x0) 20:14:01 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffd000/0x1000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000008, 0x1010, 0xffffffffffffffff, 0x10000000) mmap$dsp(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ff9000/0x3000)=nil) socketpair(0x25, 0x6, 0x3, &(0x7f0000000140)) 20:14:01 executing program 0: io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) 20:14:02 executing program 3 (fault-call:1 fault-nth:4): socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x221}) 20:14:02 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 20:14:02 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x2, &(0x7f0000000080), 0x0) 20:14:02 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x3, &(0x7f0000000080), 0x0) 20:14:02 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffd000/0x1000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000008, 0x1010, 0xffffffffffffffff, 0x10000000) mmap$dsp(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) socketpair(0x25, 0x6, 0x3, &(0x7f0000000140)) 20:14:02 executing program 0: io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x2}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) 20:14:02 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffd000/0x1000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000008, 0x1010, 0xffffffffffffffff, 0x10000000) mmap$dsp(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ff9000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000fff000/0x1000)=nil) socketpair(0x25, 0x6, 0x3, &(0x7f0000000140)) 20:14:02 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffd000/0x1000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000008, 0x1010, 0xffffffffffffffff, 0x10000000) socketpair(0x25, 0x6, 0x3, &(0x7f0000000140)) 20:14:02 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x2, &(0x7f0000000080), 0x0) [ 2237.484593][ T7590] FAULT_INJECTION: forcing a failure. [ 2237.484593][ T7590] name failslab, interval 1, probability 0, space 0, times 0 [ 2237.547485][ T7590] CPU: 1 PID: 7590 Comm: syz-executor.3 Not tainted 5.11.0-rc3-syzkaller #0 [ 2237.556237][ T7590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2237.566434][ T7590] Call Trace: [ 2237.569752][ T7590] dump_stack+0x107/0x163 [ 2237.574312][ T7590] should_fail.cold+0x5/0xa [ 2237.578832][ T7590] ? percpu_ref_init+0xcc/0x3a0 [ 2237.584033][ T7590] ? percpu_ref_init+0xcc/0x3a0 [ 2237.590662][ T7590] should_failslab+0x5/0x10 [ 2237.595197][ T7590] kmem_cache_alloc_trace+0x55/0x360 [ 2237.600521][ T7590] ? __io_openat_prep+0x390/0x390 [ 2237.606975][ T7590] percpu_ref_init+0xcc/0x3a0 [ 2237.611691][ T7590] ? ____kasan_kmalloc.constprop.0+0x82/0xa0 [ 2237.619041][ T7590] io_uring_setup+0x676/0x38e0 [ 2237.625133][ T7590] ? io_wq_submit_work+0x6f0/0x6f0 [ 2237.630773][ T7590] ? wait_for_completion_io+0x260/0x260 [ 2237.637200][ T7590] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2237.643135][ T7590] do_syscall_64+0x2d/0x70 [ 2237.647581][ T7590] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2237.653505][ T7590] RIP: 0033:0x45e219 [ 2237.657425][ T7590] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2237.677067][ T7590] RSP: 002b:00007f137056dc68 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 2237.685536][ T7590] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 20:14:02 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x2, &(0x7f0000000080), 0x0) 20:14:02 executing program 0: io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x3}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) 20:14:02 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) [ 2237.693536][ T7590] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000136 [ 2237.701536][ T7590] RBP: 00007f137056dca0 R08: 0000000000000000 R09: 0000000000000000 [ 2237.710443][ T7590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2237.718436][ T7590] R13: 00000000016afb5f R14: 00007f137056e9c0 R15: 000000000119bf8c 20:14:02 executing program 3 (fault-call:1 fault-nth:5): socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x221}) 20:14:02 executing program 2: io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x2}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) 20:14:02 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffd000/0x1000)=nil) socketpair(0x25, 0x6, 0x3, &(0x7f0000000140)) 20:14:02 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 20:14:02 executing program 0: io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x4}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) 20:14:02 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffd000/0x1000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000008, 0x1010, 0xffffffffffffffff, 0x10000000) mmap$dsp(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ff9000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000fff000/0x1000)=nil) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x501080, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x1, 0x0) socketpair(0x25, 0x6, 0x3, &(0x7f0000000140)) 20:14:02 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffd000/0x1000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000008, 0x1010, 0xffffffffffffffff, 0x10000000) mmap$dsp(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ff9000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000fff000/0x1000)=nil) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x501080, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000900), 0x1, 0x0) socketpair(0x25, 0x6, 0x3, &(0x7f0000000140)) 20:14:02 executing program 2: io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x2}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) [ 2238.049871][ T7614] FAULT_INJECTION: forcing a failure. [ 2238.049871][ T7614] name fail_page_alloc, interval 1, probability 0, space 0, times 0 20:14:02 executing program 0: io_uring_setup(0x136, &(0x7f0000000080)={0x0, 0x806e, 0x5}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) 20:14:02 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) socketpair(0x25, 0x6, 0x3, &(0x7f0000000140)) [ 2238.111461][ T7614] CPU: 1 PID: 7614 Comm: syz-executor.3 Not tainted 5.11.0-rc3-syzkaller #0 [ 2238.120208][ T7614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2238.130290][ T7614] Call Trace: [ 2238.133616][ T7614] dump_stack+0x107/0x163 [ 2238.137988][ T7614] should_fail.cold+0x5/0xa [ 2238.142708][ T7614] __alloc_pages_nodemask+0x189/0x730 [ 2238.148121][ T7614] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 2238.155553][ T7614] ? up_write+0x191/0x560 [ 2238.161286][ T7614] ? downgrade_write+0x3a0/0x3a0 [ 2238.166264][ T7614] alloc_pages_current+0x18c/0x2a0 [ 2238.171903][ T7614] __get_free_pages+0x8/0x40 [ 2238.176525][ T7614] io_uring_setup+0x1513/0x38e0 [ 2238.182560][ T7614] ? io_wq_submit_work+0x6f0/0x6f0 [ 2238.189177][ T7614] ? wait_for_completion_io+0x260/0x260 [ 2238.194825][ T7614] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2238.200786][ T7614] do_syscall_64+0x2d/0x70 [ 2238.205240][ T7614] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2238.211168][ T7614] RIP: 0033:0x45e219 [ 2238.215525][ T7614] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2238.235167][ T7614] RSP: 002b:00007f137056dc68 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 2238.243620][ T7614] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 2238.251619][ T7614] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000136 20:14:02 executing program 5: socketpair(0x25, 0x6, 0x3, &(0x7f0000000140)) 20:14:02 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) [ 2238.259634][ T7614] RBP: 00007f137056dca0 R08: 0000000000000000 R09: 0000000000000000 [ 2238.267631][ T7614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 2238.275631][ T7614] R13: 00000000016afb5f R14: 00007f137056e9c0 R15: 000000000119bf8c [ 2238.483514][ T7614] general protection fault, probably for non-canonical address 0xdffffc0000000022: 0000 [#1] PREEMPT SMP KASAN [ 2238.497074][ T7614] KASAN: null-ptr-deref in range [0x0000000000000110-0x0000000000000117] [ 2238.505693][ T7614] CPU: 0 PID: 7614 Comm: syz-executor.3 Not tainted 5.11.0-rc3-syzkaller #0 [ 2238.514395][ T7614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2238.525127][ T7614] RIP: 0010:io_disable_sqo_submit+0xdb/0x130 [ 2238.531439][ T7614] Code: fa 48 c1 ea 03 80 3c 02 00 75 62 48 8b 9b c0 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bb 14 01 00 00 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 1d 83 [ 2238.551063][ T7614] RSP: 0018:ffffc9000bca7d78 EFLAGS: 00010007 [ 2238.557426][ T7614] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff815976e0 [ 2238.566138][ T7614] RDX: 0000000000000022 RSI: 0000000000000004 RDI: 0000000000000114 [ 2238.574699][ T7614] RBP: ffff888020ddd480 R08: 0000000000000001 R09: 0000000000000003 [ 2238.583553][ T7614] R10: fffff52001794fa1 R11: 0000000000000001 R12: fffffffffffffff4 [ 2238.592122][ T7614] R13: 0000000000000001 R14: ffff888020ddd054 R15: ffff888020ddd000 [ 2238.600663][ T7614] FS: 00007f137056e700(0000) GS:ffff8880b9e00000(0000) knlGS:0000000000000000 [ 2238.609695][ T7614] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2238.616287][ T7614] CR2: 0000000000749138 CR3: 0000000011a3c000 CR4: 00000000001506f0 [ 2238.624254][ T7614] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2238.632212][ T7614] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2238.640169][ T7614] Call Trace: [ 2238.643435][ T7614] io_uring_setup+0x12b1/0x38e0 [ 2238.648280][ T7614] ? io_wq_submit_work+0x6f0/0x6f0 [ 2238.653378][ T7614] ? wait_for_completion_io+0x260/0x260 [ 2238.658915][ T7614] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2238.664796][ T7614] do_syscall_64+0x2d/0x70 [ 2238.669200][ T7614] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2238.675085][ T7614] RIP: 0033:0x45e219 [ 2238.678973][ T7614] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2238.698592][ T7614] RSP: 002b:00007f137056dc68 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 2238.706997][ T7614] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 2238.714971][ T7614] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000136 [ 2238.722928][ T7614] RBP: 00007f137056dca0 R08: 0000000000000000 R09: 0000000000000000 [ 2238.730904][ T7614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 2238.738862][ T7614] R13: 00000000016afb5f R14: 00007f137056e9c0 R15: 000000000119bf8c [ 2238.746825][ T7614] Modules linked in: [ 2238.750719][ T7614] ---[ end trace ec76a8f88b0bb435 ]--- [ 2238.756159][ T7614] RIP: 0010:io_disable_sqo_submit+0xdb/0x130 [ 2238.762132][ T7614] Code: fa 48 c1 ea 03 80 3c 02 00 75 62 48 8b 9b c0 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bb 14 01 00 00 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 1d 83 [ 2238.781756][ T7614] RSP: 0018:ffffc9000bca7d78 EFLAGS: 00010007 [ 2238.787824][ T7614] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff815976e0 [ 2238.795796][ T7614] RDX: 0000000000000022 RSI: 0000000000000004 RDI: 0000000000000114 [ 2238.803861][ T7614] RBP: ffff888020ddd480 R08: 0000000000000001 R09: 0000000000000003 [ 2238.811832][ T7614] R10: fffff52001794fa1 R11: 0000000000000001 R12: fffffffffffffff4 [ 2238.819796][ T7614] R13: 0000000000000001 R14: ffff888020ddd054 R15: ffff888020ddd000 [ 2238.827764][ T7614] FS: 00007f137056e700(0000) GS:ffff8880b9e00000(0000) knlGS:0000000000000000 [ 2238.836684][ T7614] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2238.843254][ T7614] CR2: 0000000000749138 CR3: 0000000011a3c000 CR4: 00000000001506f0 [ 2238.851211][ T7614] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2238.859172][ T7614] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2238.867333][ T7614] Kernel panic - not syncing: Fatal exception [ 2238.874075][ T7614] Kernel Offset: disabled [ 2238.878390][ T7614] Rebooting in 86400 seconds..