da936903bd9c18a5036a440f9bedfa53924e8098ea0887e1ccbabeae31fc29d1a17348098e2eaf1e7683a6eadea889bff4fe47cded92ffacd79d03417352870ae67e658319cecb204b55b3308d2d5fa93d90708f27975cdf3aad2a30b298c60", 0xfa}], 0x3, &(0x7f00000015c0)=[{0x108, 0x10e, 0x8, "fec6ffa8ef181a58ca6c17e9152f62a19647fb7178d42f92716eca7e19cfa9716ea43490a1cb011a1f1c8a2c525a1e3a19a38e3a2098583fb8dfc398b8833bd7f3a8b8a9ca7b03ffed77cd5657a0a6991858066c75f728a59bb67af5fee93e9410b6e3482478125b297611ec8200634bf9c4ce258922a5fe96b0da3f3f75216f88f0c47b1f3facccd83ed07befc3725db1c4799f15164277df9f9b51d9beee5d98142e9b5d50c2bde0424ec9bde8b3644b307a29e71b357746027f79497f6caf7026d37fe1d0548fcbf8a0dbe875c4fcdb853f7a159d2286554fbc11aa3686c15d606085c7974fdb4c8a60fa373364b49a13a2"}, {0x108, 0x105, 0x5, "12ef3d1da9686fc58698f38e5f21c1a6c665f0b40ce19c0e58b3323bebe4ad41224b91d62da3f4acad8f2f254a1dcd54ace3ac71371bae3f470336011f6b502242bf6a3abb95b30b19a572928eb77f224808e47a288711aece9bfd0cc1fd2c0b2ee3fc253f3771bee5f77daaa3501d98c520cec307fe0170ee55e674153e0784184cf5373715f30c9f7805610039ad5d153315b603678e57076263144f564f5b9d54f0fe900613e7b882f92413af38c887296e8a41d7a54d3b5e3de4c84f8827b0d04bcda94bc7bcbe5919960d713c3e0c7f01c5cd5605f8a0736393d82e9780800021631643d70f78a509d075316c960c"}, {0xf0, 0x6, 0x1, "979e782d23933f4cc7773124abf175c05f12dbf60e00bbc380a4461f7add7f468afc14734f79500b31818b368c6235b85e7e763981ba46db0bda04df2b1bd84ed32988b4b5826ccbf5b648397cabce121522c54ee9f79bba6cb906721e5736c87cfcbb3c07aa7ad07729c926666a23ab125b6dd07a4321b1b045ee7869eb75226aed42378e72f797a0cd71087502ff419062a2526599c672358b64de30e42498f13198ed26bd6ead310a5a0750dbe2a5aef002366c4805fc7c0a105d1db09e08ad22071b39246d8afc1e609688b3f6b5d2888afbca109bcfd5e9"}, {0x60, 0x100, 0x1c83, "7544a46d4ca264541e5bf3deb2e5ddb559ee51f084a86cc60a2a856a0ff6b171da5a7e15b36beba1987f52dc78530e6934e3ada96bae71ef09df7e8b6635d43ba551f9d5ea727e5a2f"}, {0xb8, 0x0, 0x5, "118cdb1e466394043897e11acba2a22ae02bb67bd286068e3c4ec924fbf38bc2b130204034032712036c92600a80f351f9007d79f86f4261abf0138c17dfd0ddfb61514fd1ec35a7fea6a7e7165d5dd41d9eb409427716d1efa8c68ea6d7e7d0a809946d5063d3210d8d212e797d4f31d771bf9ca3bb39397c684f45805bffa5581311d90fb0dcd3fe5cab8076bb62028d08c101bca17243d5de40236ffaea73460b9df2"}, {0x30, 0xff, 0xbfee, "f0031da9c6e574330c5818a07da708829bf9b3b0bbafe3dd42ebf09d11"}], 0x448}, 0x0, 0x4000810, 0x1}, 0x4) 18:29:32 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x3176, &(0x7f00000011c0), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, 0x0, &(0x7f0000001280)) 18:29:32 executing program 3: r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r0, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r0, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r1, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f00000003c0)) r3 = accept4$x25(r2, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000003080)={&(0x7f0000002f80)={0x1d, 0x0, 0x3, {0x0, 0x1, 0x4}, 0x1}, 0x18, &(0x7f0000003040)={&(0x7f0000002fc0)="d5e9363607a3cd8107358a753de20d4cbf2a5a24da2dddde855ad5591801b3f220f45d758e17bdeee065791399b421fe320bd4bd06e93031343cc237f17d58e730a9e10d3825377f8ab678ab5ab7e664a9e7904f1074f9c673f375c8a228ce6560c705e76f577906fe3f8e501a8377e8ff3315ef00995f46fcc6", 0x7a}}, 0x24004800) recvfrom$x25(r3, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r3, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r4, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000030c0)={'team0\x00', 0x0}) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r6, 0x89e2, &(0x7f00000003c0)) r7 = accept4$x25(r6, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r7, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r7, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000003640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003600)={&(0x7f0000003100)=ANY=[@ANYBLOB="04040000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fcdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="f800028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000400000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040003000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0400028008000100", @ANYRES32=r8, @ANYBLOB="7400028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000700000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000800000008000100", @ANYRES32=0x0, @ANYBLOB="6002028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400c908000008000600", @ANYRES32=r1, @ANYBLOB="3c00010024000100656e61626c656400000000000000000000000000000000000cd2410f11d8bb1d317f1600000000000000050003000600", @ANYRES32=r4, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r5, @ANYBLOB="080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000900000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="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"], 0x404}, 0x1, 0x0, 0x0, 0x1000c000}, 0x800) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x133, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:29:32 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x3176, &(0x7f00000011c0), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, 0x0, &(0x7f0000001280)) 18:29:32 executing program 1: syz_io_uring_setup(0x0, &(0x7f00000011c0)={0x0, 0xcdcd, 0x2, 0x3, 0x261}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 18:29:32 executing program 2: syz_io_uring_setup(0x3176, &(0x7f00000011c0), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, &(0x7f0000001240), 0x0) 18:29:32 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x3176, &(0x7f00000011c0), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, 0x0, &(0x7f0000001280)) syz_io_uring_submit(0x0, r1, &(0x7f0000001a80)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001a40)={&(0x7f00000012c0)=@l2={0x1f, 0x9, @any, 0x63d, 0x2}, 0x80, &(0x7f0000001580)=[{&(0x7f0000001340)='`}', 0x2}, {&(0x7f0000001380)="0575c70458112c65c76dd6122758ccbb79cfb85cac885bae1df00d330d352fcb6eb9cccec626671365587eae14d7b85132f80d69fb59b86d223fa68c2ca5698c3e6cb10f2351719b84aef74c6eb862f7fa2cb4c0c58c0711e2c7b8200e3215b6ea010d898e2e9bb6df164d3d0977768c16ddbdb58c452a3715192f69831bed7347337d08819241cd9494bc0360052b1f99fe681d9a1280dc0fc6af91f835e53d1d6c01e857c00d1b9d66689b18e3207796580c1c2f34965cf83a35bbff92d9af03d6921303ffc8767aafa53834e6ff4ec5f5f0654c00a1f225d0f80c1953d6d7bb8a9084a8a335df5905", 0xea}, {&(0x7f0000001480)="0cd4855eb4d642558c27df6a526f005405089aa3a3c7368f2ef6471e27cadcd319ecc7f597964b92ec3d5024e615555f626a88d31dd5bef4467b76c9dce723b74776177edfad907da1de429947a26bb7ac340f9d77ad6b7f2ca8c376b2de0e7a27e70c395ef3e898695e1b4c92d63de41ec66fbcc4c30095165d2f3178bfa30e040d36f7a4978a5c663abd98946207e6491fe1b085613f5cc1781da936903bd9c18a5036a440f9bedfa53924e8098ea0887e1ccbabeae31fc29d1a17348098e2eaf1e7683a6eadea889bff4fe47cded92ffacd79d03417352870ae67e658319cecb204b55b3308d2d5fa93d90708f27975cdf3aad2a30b298c60", 0xfa}], 0x3, &(0x7f00000015c0)=[{0x108, 0x10e, 0x8, "fec6ffa8ef181a58ca6c17e9152f62a19647fb7178d42f92716eca7e19cfa9716ea43490a1cb011a1f1c8a2c525a1e3a19a38e3a2098583fb8dfc398b8833bd7f3a8b8a9ca7b03ffed77cd5657a0a6991858066c75f728a59bb67af5fee93e9410b6e3482478125b297611ec8200634bf9c4ce258922a5fe96b0da3f3f75216f88f0c47b1f3facccd83ed07befc3725db1c4799f15164277df9f9b51d9beee5d98142e9b5d50c2bde0424ec9bde8b3644b307a29e71b357746027f79497f6caf7026d37fe1d0548fcbf8a0dbe875c4fcdb853f7a159d2286554fbc11aa3686c15d606085c7974fdb4c8a60fa373364b49a13a2"}, {0x108, 0x105, 0x5, "12ef3d1da9686fc58698f38e5f21c1a6c665f0b40ce19c0e58b3323bebe4ad41224b91d62da3f4acad8f2f254a1dcd54ace3ac71371bae3f470336011f6b502242bf6a3abb95b30b19a572928eb77f224808e47a288711aece9bfd0cc1fd2c0b2ee3fc253f3771bee5f77daaa3501d98c520cec307fe0170ee55e674153e0784184cf5373715f30c9f7805610039ad5d153315b603678e57076263144f564f5b9d54f0fe900613e7b882f92413af38c887296e8a41d7a54d3b5e3de4c84f8827b0d04bcda94bc7bcbe5919960d713c3e0c7f01c5cd5605f8a0736393d82e9780800021631643d70f78a509d075316c960c"}, {0xf0, 0x6, 0x1, "979e782d23933f4cc7773124abf175c05f12dbf60e00bbc380a4461f7add7f468afc14734f79500b31818b368c6235b85e7e763981ba46db0bda04df2b1bd84ed32988b4b5826ccbf5b648397cabce121522c54ee9f79bba6cb906721e5736c87cfcbb3c07aa7ad07729c926666a23ab125b6dd07a4321b1b045ee7869eb75226aed42378e72f797a0cd71087502ff419062a2526599c672358b64de30e42498f13198ed26bd6ead310a5a0750dbe2a5aef002366c4805fc7c0a105d1db09e08ad22071b39246d8afc1e609688b3f6b5d2888afbca109bcfd5e9"}, {0x60, 0x100, 0x1c83, "7544a46d4ca264541e5bf3deb2e5ddb559ee51f084a86cc60a2a856a0ff6b171da5a7e15b36beba1987f52dc78530e6934e3ada96bae71ef09df7e8b6635d43ba551f9d5ea727e5a2f"}, {0xb8, 0x0, 0x5, "118cdb1e466394043897e11acba2a22ae02bb67bd286068e3c4ec924fbf38bc2b130204034032712036c92600a80f351f9007d79f86f4261abf0138c17dfd0ddfb61514fd1ec35a7fea6a7e7165d5dd41d9eb409427716d1efa8c68ea6d7e7d0a809946d5063d3210d8d212e797d4f31d771bf9ca3bb39397c684f45805bffa5581311d90fb0dcd3fe5cab8076bb62028d08c101bca17243d5de40236ffaea73460b9df2"}, {0x30, 0xff, 0xbfee, "f0031da9c6e574330c5818a07da708829bf9b3b0bbafe3dd42ebf09d11"}], 0x448}, 0x0, 0x4000810, 0x1}, 0x4) 18:29:32 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x3176, &(0x7f00000011c0), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, 0x0, &(0x7f0000001280)) 18:29:32 executing program 1: syz_io_uring_setup(0x0, &(0x7f00000011c0)={0x0, 0xcdcd, 0x2, 0x3, 0x261}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 18:29:32 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x3176, &(0x7f00000011c0), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, 0x0, &(0x7f0000001280)) 18:29:32 executing program 3: r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r0, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r0, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r1, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f00000003c0)) r3 = accept4$x25(r2, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000003080)={&(0x7f0000002f80)={0x1d, 0x0, 0x3, {0x0, 0x1, 0x4}, 0x1}, 0x18, &(0x7f0000003040)={&(0x7f0000002fc0)="d5e9363607a3cd8107358a753de20d4cbf2a5a24da2dddde855ad5591801b3f220f45d758e17bdeee065791399b421fe320bd4bd06e93031343cc237f17d58e730a9e10d3825377f8ab678ab5ab7e664a9e7904f1074f9c673f375c8a228ce6560c705e76f577906fe3f8e501a8377e8ff3315ef00995f46fcc6", 0x7a}}, 0x24004800) recvfrom$x25(r3, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r3, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r4, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000030c0)={'team0\x00', 0x0}) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r6, 0x89e2, &(0x7f00000003c0)) r7 = accept4$x25(r6, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r7, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r7, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000003640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003600)={&(0x7f0000003100)=ANY=[@ANYBLOB="04040000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fcdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="f800028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000400000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040003000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0400028008000100", @ANYRES32=r8, @ANYBLOB="7400028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000700000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000800000008000100", @ANYRES32=0x0, @ANYBLOB="6002028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400c908000008000600", @ANYRES32=r1, @ANYBLOB="3c00010024000100656e61626c656400000000000000000000000000000000000cd2410f11d8bb1d317f1600000000000000050003000600", @ANYRES32=r4, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r5, @ANYBLOB="080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000900000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="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"], 0x404}, 0x1, 0x0, 0x0, 0x1000c000}, 0x800) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x133, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:29:32 executing program 2: syz_io_uring_setup(0x0, &(0x7f00000011c0), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, &(0x7f0000001240), 0x0) 18:29:32 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x3176, &(0x7f00000011c0), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, 0x0, &(0x7f0000001280)) syz_io_uring_submit(0x0, r1, &(0x7f0000001a80)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001a40)={&(0x7f00000012c0)=@l2={0x1f, 0x9, @any, 0x63d, 0x2}, 0x80, &(0x7f0000001580)=[{&(0x7f0000001340)='`}', 0x2}, {&(0x7f0000001380)="0575c70458112c65c76dd6122758ccbb79cfb85cac885bae1df00d330d352fcb6eb9cccec626671365587eae14d7b85132f80d69fb59b86d223fa68c2ca5698c3e6cb10f2351719b84aef74c6eb862f7fa2cb4c0c58c0711e2c7b8200e3215b6ea010d898e2e9bb6df164d3d0977768c16ddbdb58c452a3715192f69831bed7347337d08819241cd9494bc0360052b1f99fe681d9a1280dc0fc6af91f835e53d1d6c01e857c00d1b9d66689b18e3207796580c1c2f34965cf83a35bbff92d9af03d6921303ffc8767aafa53834e6ff4ec5f5f0654c00a1f225d0f80c1953d6d7bb8a9084a8a335df5905", 0xea}, {&(0x7f0000001480)="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", 0xfa}], 0x3, &(0x7f00000015c0)=[{0x108, 0x10e, 0x8, "fec6ffa8ef181a58ca6c17e9152f62a19647fb7178d42f92716eca7e19cfa9716ea43490a1cb011a1f1c8a2c525a1e3a19a38e3a2098583fb8dfc398b8833bd7f3a8b8a9ca7b03ffed77cd5657a0a6991858066c75f728a59bb67af5fee93e9410b6e3482478125b297611ec8200634bf9c4ce258922a5fe96b0da3f3f75216f88f0c47b1f3facccd83ed07befc3725db1c4799f15164277df9f9b51d9beee5d98142e9b5d50c2bde0424ec9bde8b3644b307a29e71b357746027f79497f6caf7026d37fe1d0548fcbf8a0dbe875c4fcdb853f7a159d2286554fbc11aa3686c15d606085c7974fdb4c8a60fa373364b49a13a2"}, {0x108, 0x105, 0x5, "12ef3d1da9686fc58698f38e5f21c1a6c665f0b40ce19c0e58b3323bebe4ad41224b91d62da3f4acad8f2f254a1dcd54ace3ac71371bae3f470336011f6b502242bf6a3abb95b30b19a572928eb77f224808e47a288711aece9bfd0cc1fd2c0b2ee3fc253f3771bee5f77daaa3501d98c520cec307fe0170ee55e674153e0784184cf5373715f30c9f7805610039ad5d153315b603678e57076263144f564f5b9d54f0fe900613e7b882f92413af38c887296e8a41d7a54d3b5e3de4c84f8827b0d04bcda94bc7bcbe5919960d713c3e0c7f01c5cd5605f8a0736393d82e9780800021631643d70f78a509d075316c960c"}, {0xf0, 0x6, 0x1, "979e782d23933f4cc7773124abf175c05f12dbf60e00bbc380a4461f7add7f468afc14734f79500b31818b368c6235b85e7e763981ba46db0bda04df2b1bd84ed32988b4b5826ccbf5b648397cabce121522c54ee9f79bba6cb906721e5736c87cfcbb3c07aa7ad07729c926666a23ab125b6dd07a4321b1b045ee7869eb75226aed42378e72f797a0cd71087502ff419062a2526599c672358b64de30e42498f13198ed26bd6ead310a5a0750dbe2a5aef002366c4805fc7c0a105d1db09e08ad22071b39246d8afc1e609688b3f6b5d2888afbca109bcfd5e9"}, {0x60, 0x100, 0x1c83, "7544a46d4ca264541e5bf3deb2e5ddb559ee51f084a86cc60a2a856a0ff6b171da5a7e15b36beba1987f52dc78530e6934e3ada96bae71ef09df7e8b6635d43ba551f9d5ea727e5a2f"}, {0xb8, 0x0, 0x5, "118cdb1e466394043897e11acba2a22ae02bb67bd286068e3c4ec924fbf38bc2b130204034032712036c92600a80f351f9007d79f86f4261abf0138c17dfd0ddfb61514fd1ec35a7fea6a7e7165d5dd41d9eb409427716d1efa8c68ea6d7e7d0a809946d5063d3210d8d212e797d4f31d771bf9ca3bb39397c684f45805bffa5581311d90fb0dcd3fe5cab8076bb62028d08c101bca17243d5de40236ffaea73460b9df2"}, {0x30, 0xff, 0xbfee, "f0031da9c6e574330c5818a07da708829bf9b3b0bbafe3dd42ebf09d11"}], 0x448}, 0x0, 0x4000810, 0x1}, 0x4) 18:29:32 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x3176, &(0x7f00000011c0), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, &(0x7f0000001240), 0x0) 18:29:32 executing program 1: syz_io_uring_setup(0x0, &(0x7f00000011c0)={0x0, 0xcdcd, 0x2, 0x3, 0x261}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 18:29:32 executing program 2: syz_io_uring_setup(0x0, &(0x7f00000011c0), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, &(0x7f0000001240), 0x0) 18:29:32 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x3176, &(0x7f00000011c0), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, 0x0, &(0x7f0000001280)) 18:29:32 executing program 3: r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r0, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r0, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r1, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f00000003c0)) r3 = accept4$x25(r2, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000003080)={&(0x7f0000002f80)={0x1d, 0x0, 0x3, {0x0, 0x1, 0x4}, 0x1}, 0x18, &(0x7f0000003040)={&(0x7f0000002fc0)="d5e9363607a3cd8107358a753de20d4cbf2a5a24da2dddde855ad5591801b3f220f45d758e17bdeee065791399b421fe320bd4bd06e93031343cc237f17d58e730a9e10d3825377f8ab678ab5ab7e664a9e7904f1074f9c673f375c8a228ce6560c705e76f577906fe3f8e501a8377e8ff3315ef00995f46fcc6", 0x7a}}, 0x24004800) recvfrom$x25(r3, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r3, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r4, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000030c0)={'team0\x00', 0x0}) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r6, 0x89e2, &(0x7f00000003c0)) r7 = accept4$x25(r6, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r7, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r7, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000003640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003600)={&(0x7f0000003100)=ANY=[@ANYBLOB="04040000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fcdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="f800028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000400000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040003000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0400028008000100", @ANYRES32=r8, @ANYBLOB="7400028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000700000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000800000008000100", @ANYRES32=0x0, @ANYBLOB="6002028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400c908000008000600", @ANYRES32=r1, @ANYBLOB="3c00010024000100656e61626c656400000000000000000000000000000000000cd2410f11d8bb1d317f1600000000000000050003000600", @ANYRES32=r4, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r5, @ANYBLOB="080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000900000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f7500240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040001000000080007000000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000010000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400ffff000038000100240001006c625f73746174735f726566726573685ffca5696e74657276616c000000000000000500030003000000080004001f00"], 0x404}, 0x1, 0x0, 0x0, 0x1000c000}, 0x800) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x133, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:29:32 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x3176, &(0x7f00000011c0), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, 0x0, &(0x7f0000001280)) syz_io_uring_submit(0x0, r1, &(0x7f0000001a80)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001a40)={&(0x7f00000012c0)=@l2={0x1f, 0x9, @any, 0x63d, 0x2}, 0x80, &(0x7f0000001580)=[{&(0x7f0000001340)='`}', 0x2}, {&(0x7f0000001380)="0575c70458112c65c76dd6122758ccbb79cfb85cac885bae1df00d330d352fcb6eb9cccec626671365587eae14d7b85132f80d69fb59b86d223fa68c2ca5698c3e6cb10f2351719b84aef74c6eb862f7fa2cb4c0c58c0711e2c7b8200e3215b6ea010d898e2e9bb6df164d3d0977768c16ddbdb58c452a3715192f69831bed7347337d08819241cd9494bc0360052b1f99fe681d9a1280dc0fc6af91f835e53d1d6c01e857c00d1b9d66689b18e3207796580c1c2f34965cf83a35bbff92d9af03d6921303ffc8767aafa53834e6ff4ec5f5f0654c00a1f225d0f80c1953d6d7bb8a9084a8a335df5905", 0xea}, {&(0x7f0000001480)="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", 0xfa}], 0x3, &(0x7f00000015c0)=[{0x108, 0x10e, 0x8, "fec6ffa8ef181a58ca6c17e9152f62a19647fb7178d42f92716eca7e19cfa9716ea43490a1cb011a1f1c8a2c525a1e3a19a38e3a2098583fb8dfc398b8833bd7f3a8b8a9ca7b03ffed77cd5657a0a6991858066c75f728a59bb67af5fee93e9410b6e3482478125b297611ec8200634bf9c4ce258922a5fe96b0da3f3f75216f88f0c47b1f3facccd83ed07befc3725db1c4799f15164277df9f9b51d9beee5d98142e9b5d50c2bde0424ec9bde8b3644b307a29e71b357746027f79497f6caf7026d37fe1d0548fcbf8a0dbe875c4fcdb853f7a159d2286554fbc11aa3686c15d606085c7974fdb4c8a60fa373364b49a13a2"}, {0x108, 0x105, 0x5, "12ef3d1da9686fc58698f38e5f21c1a6c665f0b40ce19c0e58b3323bebe4ad41224b91d62da3f4acad8f2f254a1dcd54ace3ac71371bae3f470336011f6b502242bf6a3abb95b30b19a572928eb77f224808e47a288711aece9bfd0cc1fd2c0b2ee3fc253f3771bee5f77daaa3501d98c520cec307fe0170ee55e674153e0784184cf5373715f30c9f7805610039ad5d153315b603678e57076263144f564f5b9d54f0fe900613e7b882f92413af38c887296e8a41d7a54d3b5e3de4c84f8827b0d04bcda94bc7bcbe5919960d713c3e0c7f01c5cd5605f8a0736393d82e9780800021631643d70f78a509d075316c960c"}, {0xf0, 0x6, 0x1, "979e782d23933f4cc7773124abf175c05f12dbf60e00bbc380a4461f7add7f468afc14734f79500b31818b368c6235b85e7e763981ba46db0bda04df2b1bd84ed32988b4b5826ccbf5b648397cabce121522c54ee9f79bba6cb906721e5736c87cfcbb3c07aa7ad07729c926666a23ab125b6dd07a4321b1b045ee7869eb75226aed42378e72f797a0cd71087502ff419062a2526599c672358b64de30e42498f13198ed26bd6ead310a5a0750dbe2a5aef002366c4805fc7c0a105d1db09e08ad22071b39246d8afc1e609688b3f6b5d2888afbca109bcfd5e9"}, {0x60, 0x100, 0x1c83, "7544a46d4ca264541e5bf3deb2e5ddb559ee51f084a86cc60a2a856a0ff6b171da5a7e15b36beba1987f52dc78530e6934e3ada96bae71ef09df7e8b6635d43ba551f9d5ea727e5a2f"}, {0xb8, 0x0, 0x5, "118cdb1e466394043897e11acba2a22ae02bb67bd286068e3c4ec924fbf38bc2b130204034032712036c92600a80f351f9007d79f86f4261abf0138c17dfd0ddfb61514fd1ec35a7fea6a7e7165d5dd41d9eb409427716d1efa8c68ea6d7e7d0a809946d5063d3210d8d212e797d4f31d771bf9ca3bb39397c684f45805bffa5581311d90fb0dcd3fe5cab8076bb62028d08c101bca17243d5de40236ffaea73460b9df2"}, {0x30, 0xff, 0xbfee, "f0031da9c6e574330c5818a07da708829bf9b3b0bbafe3dd42ebf09d11"}], 0x448}, 0x0, 0x4000810, 0x1}, 0x4) 18:29:32 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x3176, &(0x7f00000011c0), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, &(0x7f0000001240), 0x0) 18:29:32 executing program 1: syz_io_uring_setup(0x3176, 0x0, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 18:29:32 executing program 2: syz_io_uring_setup(0x0, &(0x7f00000011c0), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, &(0x7f0000001240), 0x0) 18:29:32 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x3176, &(0x7f00000011c0), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, &(0x7f0000001240), 0x0) 18:29:32 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x3176, &(0x7f00000011c0), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, &(0x7f0000001240)=0x0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000001a80)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001a40)={&(0x7f00000012c0)=@l2={0x1f, 0x9, @any, 0x63d, 0x2}, 0x80, &(0x7f0000001580)=[{&(0x7f0000001340)='`}', 0x2}, {&(0x7f0000001380)="0575c70458112c65c76dd6122758ccbb79cfb85cac885bae1df00d330d352fcb6eb9cccec626671365587eae14d7b85132f80d69fb59b86d223fa68c2ca5698c3e6cb10f2351719b84aef74c6eb862f7fa2cb4c0c58c0711e2c7b8200e3215b6ea010d898e2e9bb6df164d3d0977768c16ddbdb58c452a3715192f69831bed7347337d08819241cd9494bc0360052b1f99fe681d9a1280dc0fc6af91f835e53d1d6c01e857c00d1b9d66689b18e3207796580c1c2f34965cf83a35bbff92d9af03d6921303ffc8767aafa53834e6ff4ec5f5f0654c00a1f225d0f80c1953d6d7bb8a9084a8a335df5905", 0xea}, {&(0x7f0000001480)="0cd4855eb4d642558c27df6a526f005405089aa3a3c7368f2ef6471e27cadcd319ecc7f597964b92ec3d5024e615555f626a88d31dd5bef4467b76c9dce723b74776177edfad907da1de429947a26bb7ac340f9d77ad6b7f2ca8c376b2de0e7a27e70c395ef3e898695e1b4c92d63de41ec66fbcc4c30095165d2f3178bfa30e040d36f7a4978a5c663abd98946207e6491fe1b085613f5cc1781da936903bd9c18a5036a440f9bedfa53924e8098ea0887e1ccbabeae31fc29d1a17348098e2eaf1e7683a6eadea889bff4fe47cded92ffacd79d03417352870ae67e658319cecb204b55b3308d2d5fa93d90708f27975cdf3aad2a30b298c60", 0xfa}], 0x3, &(0x7f00000015c0)=[{0x108, 0x10e, 0x8, "fec6ffa8ef181a58ca6c17e9152f62a19647fb7178d42f92716eca7e19cfa9716ea43490a1cb011a1f1c8a2c525a1e3a19a38e3a2098583fb8dfc398b8833bd7f3a8b8a9ca7b03ffed77cd5657a0a6991858066c75f728a59bb67af5fee93e9410b6e3482478125b297611ec8200634bf9c4ce258922a5fe96b0da3f3f75216f88f0c47b1f3facccd83ed07befc3725db1c4799f15164277df9f9b51d9beee5d98142e9b5d50c2bde0424ec9bde8b3644b307a29e71b357746027f79497f6caf7026d37fe1d0548fcbf8a0dbe875c4fcdb853f7a159d2286554fbc11aa3686c15d606085c7974fdb4c8a60fa373364b49a13a2"}, {0x108, 0x105, 0x5, "12ef3d1da9686fc58698f38e5f21c1a6c665f0b40ce19c0e58b3323bebe4ad41224b91d62da3f4acad8f2f254a1dcd54ace3ac71371bae3f470336011f6b502242bf6a3abb95b30b19a572928eb77f224808e47a288711aece9bfd0cc1fd2c0b2ee3fc253f3771bee5f77daaa3501d98c520cec307fe0170ee55e674153e0784184cf5373715f30c9f7805610039ad5d153315b603678e57076263144f564f5b9d54f0fe900613e7b882f92413af38c887296e8a41d7a54d3b5e3de4c84f8827b0d04bcda94bc7bcbe5919960d713c3e0c7f01c5cd5605f8a0736393d82e9780800021631643d70f78a509d075316c960c"}, {0xf0, 0x6, 0x1, "979e782d23933f4cc7773124abf175c05f12dbf60e00bbc380a4461f7add7f468afc14734f79500b31818b368c6235b85e7e763981ba46db0bda04df2b1bd84ed32988b4b5826ccbf5b648397cabce121522c54ee9f79bba6cb906721e5736c87cfcbb3c07aa7ad07729c926666a23ab125b6dd07a4321b1b045ee7869eb75226aed42378e72f797a0cd71087502ff419062a2526599c672358b64de30e42498f13198ed26bd6ead310a5a0750dbe2a5aef002366c4805fc7c0a105d1db09e08ad22071b39246d8afc1e609688b3f6b5d2888afbca109bcfd5e9"}, {0x60, 0x100, 0x1c83, "7544a46d4ca264541e5bf3deb2e5ddb559ee51f084a86cc60a2a856a0ff6b171da5a7e15b36beba1987f52dc78530e6934e3ada96bae71ef09df7e8b6635d43ba551f9d5ea727e5a2f"}, {0xb8, 0x0, 0x5, "118cdb1e466394043897e11acba2a22ae02bb67bd286068e3c4ec924fbf38bc2b130204034032712036c92600a80f351f9007d79f86f4261abf0138c17dfd0ddfb61514fd1ec35a7fea6a7e7165d5dd41d9eb409427716d1efa8c68ea6d7e7d0a809946d5063d3210d8d212e797d4f31d771bf9ca3bb39397c684f45805bffa5581311d90fb0dcd3fe5cab8076bb62028d08c101bca17243d5de40236ffaea73460b9df2"}, {0x30, 0xff, 0xbfee, "f0031da9c6e574330c5818a07da708829bf9b3b0bbafe3dd42ebf09d11"}], 0x448}, 0x0, 0x4000810, 0x1}, 0x4) 18:29:32 executing program 3: r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r0, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r0, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r1, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f00000003c0)) r3 = accept4$x25(r2, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000003080)={&(0x7f0000002f80)={0x1d, 0x0, 0x3, {0x0, 0x1, 0x4}, 0x1}, 0x18, &(0x7f0000003040)={&(0x7f0000002fc0)="d5e9363607a3cd8107358a753de20d4cbf2a5a24da2dddde855ad5591801b3f220f45d758e17bdeee065791399b421fe320bd4bd06e93031343cc237f17d58e730a9e10d3825377f8ab678ab5ab7e664a9e7904f1074f9c673f375c8a228ce6560c705e76f577906fe3f8e501a8377e8ff3315ef00995f46fcc6", 0x7a}}, 0x24004800) recvfrom$x25(r3, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r3, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r4, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000030c0)={'team0\x00', 0x0}) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r6, 0x89e2, &(0x7f00000003c0)) r7 = accept4$x25(r6, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r7, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r7, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000003640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003600)={&(0x7f0000003100)=ANY=[@ANYBLOB="04040000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fcdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="f800028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000400000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040003000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0400028008000100", @ANYRES32=r8, @ANYBLOB="7400028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000700000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000800000008000100", @ANYRES32=0x0, @ANYBLOB="6002028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400c908000008000600", @ANYRES32=r1, @ANYBLOB="3c00010024000100656e61626c656400000000000000000000000000000000000cd2410f11d8bb1d317f1600000000000000050003000600", @ANYRES32=r4, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r5, @ANYBLOB="080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000900000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="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"], 0x404}, 0x1, 0x0, 0x0, 0x1000c000}, 0x800) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x133, 0xffffffffffffffff, 0x8000000) 18:29:33 executing program 1: syz_io_uring_setup(0x3176, 0x0, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 18:29:33 executing program 2: syz_io_uring_setup(0x3176, 0x0, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, &(0x7f0000001240), 0x0) 18:29:33 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x3176, &(0x7f00000011c0), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, &(0x7f0000001240), 0x0) 18:29:33 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x3176, &(0x7f00000011c0), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, &(0x7f0000001240)=0x0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000001a80)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001a40)={&(0x7f00000012c0)=@l2={0x1f, 0x9, @any, 0x63d, 0x2}, 0x80, &(0x7f0000001580)=[{&(0x7f0000001340)='`}', 0x2}, {&(0x7f0000001380)="0575c70458112c65c76dd6122758ccbb79cfb85cac885bae1df00d330d352fcb6eb9cccec626671365587eae14d7b85132f80d69fb59b86d223fa68c2ca5698c3e6cb10f2351719b84aef74c6eb862f7fa2cb4c0c58c0711e2c7b8200e3215b6ea010d898e2e9bb6df164d3d0977768c16ddbdb58c452a3715192f69831bed7347337d08819241cd9494bc0360052b1f99fe681d9a1280dc0fc6af91f835e53d1d6c01e857c00d1b9d66689b18e3207796580c1c2f34965cf83a35bbff92d9af03d6921303ffc8767aafa53834e6ff4ec5f5f0654c00a1f225d0f80c1953d6d7bb8a9084a8a335df5905", 0xea}, {&(0x7f0000001480)="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", 0xfa}], 0x3, &(0x7f00000015c0)=[{0x108, 0x10e, 0x8, "fec6ffa8ef181a58ca6c17e9152f62a19647fb7178d42f92716eca7e19cfa9716ea43490a1cb011a1f1c8a2c525a1e3a19a38e3a2098583fb8dfc398b8833bd7f3a8b8a9ca7b03ffed77cd5657a0a6991858066c75f728a59bb67af5fee93e9410b6e3482478125b297611ec8200634bf9c4ce258922a5fe96b0da3f3f75216f88f0c47b1f3facccd83ed07befc3725db1c4799f15164277df9f9b51d9beee5d98142e9b5d50c2bde0424ec9bde8b3644b307a29e71b357746027f79497f6caf7026d37fe1d0548fcbf8a0dbe875c4fcdb853f7a159d2286554fbc11aa3686c15d606085c7974fdb4c8a60fa373364b49a13a2"}, {0x108, 0x105, 0x5, "12ef3d1da9686fc58698f38e5f21c1a6c665f0b40ce19c0e58b3323bebe4ad41224b91d62da3f4acad8f2f254a1dcd54ace3ac71371bae3f470336011f6b502242bf6a3abb95b30b19a572928eb77f224808e47a288711aece9bfd0cc1fd2c0b2ee3fc253f3771bee5f77daaa3501d98c520cec307fe0170ee55e674153e0784184cf5373715f30c9f7805610039ad5d153315b603678e57076263144f564f5b9d54f0fe900613e7b882f92413af38c887296e8a41d7a54d3b5e3de4c84f8827b0d04bcda94bc7bcbe5919960d713c3e0c7f01c5cd5605f8a0736393d82e9780800021631643d70f78a509d075316c960c"}, {0xf0, 0x6, 0x1, "979e782d23933f4cc7773124abf175c05f12dbf60e00bbc380a4461f7add7f468afc14734f79500b31818b368c6235b85e7e763981ba46db0bda04df2b1bd84ed32988b4b5826ccbf5b648397cabce121522c54ee9f79bba6cb906721e5736c87cfcbb3c07aa7ad07729c926666a23ab125b6dd07a4321b1b045ee7869eb75226aed42378e72f797a0cd71087502ff419062a2526599c672358b64de30e42498f13198ed26bd6ead310a5a0750dbe2a5aef002366c4805fc7c0a105d1db09e08ad22071b39246d8afc1e609688b3f6b5d2888afbca109bcfd5e9"}, {0x60, 0x100, 0x1c83, "7544a46d4ca264541e5bf3deb2e5ddb559ee51f084a86cc60a2a856a0ff6b171da5a7e15b36beba1987f52dc78530e6934e3ada96bae71ef09df7e8b6635d43ba551f9d5ea727e5a2f"}, {0xb8, 0x0, 0x5, "118cdb1e466394043897e11acba2a22ae02bb67bd286068e3c4ec924fbf38bc2b130204034032712036c92600a80f351f9007d79f86f4261abf0138c17dfd0ddfb61514fd1ec35a7fea6a7e7165d5dd41d9eb409427716d1efa8c68ea6d7e7d0a809946d5063d3210d8d212e797d4f31d771bf9ca3bb39397c684f45805bffa5581311d90fb0dcd3fe5cab8076bb62028d08c101bca17243d5de40236ffaea73460b9df2"}, {0x30, 0xff, 0xbfee, "f0031da9c6e574330c5818a07da708829bf9b3b0bbafe3dd42ebf09d11"}], 0x448}, 0x0, 0x4000810, 0x1}, 0x4) 18:29:33 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x3176, &(0x7f00000011c0), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, &(0x7f0000001240), 0x0) 18:29:33 executing program 1: syz_io_uring_setup(0x3176, 0x0, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 18:29:33 executing program 3: r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r0, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r0, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r1, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f00000003c0)) r3 = accept4$x25(r2, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000003080)={&(0x7f0000002f80)={0x1d, 0x0, 0x3, {0x0, 0x1, 0x4}, 0x1}, 0x18, &(0x7f0000003040)={&(0x7f0000002fc0)="d5e9363607a3cd8107358a753de20d4cbf2a5a24da2dddde855ad5591801b3f220f45d758e17bdeee065791399b421fe320bd4bd06e93031343cc237f17d58e730a9e10d3825377f8ab678ab5ab7e664a9e7904f1074f9c673f375c8a228ce6560c705e76f577906fe3f8e501a8377e8ff3315ef00995f46fcc6", 0x7a}}, 0x24004800) recvfrom$x25(r3, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r3, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r4, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000030c0)={'team0\x00'}) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r5, 0x89e2, &(0x7f00000003c0)) r6 = accept4$x25(r5, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r6, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r6, &(0x7f000000fdc0)=@xdp, &(0x7f000000fe40)=0x80) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x133, 0xffffffffffffffff, 0x8000000) 18:29:33 executing program 2: syz_io_uring_setup(0x3176, 0x0, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, &(0x7f0000001240), 0x0) 18:29:33 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x3176, &(0x7f00000011c0), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, &(0x7f0000001240)=0x0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000001a80)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001a40)={&(0x7f00000012c0)=@l2={0x1f, 0x9, @any, 0x63d, 0x2}, 0x80, &(0x7f0000001580)=[{&(0x7f0000001340)='`}', 0x2}, {&(0x7f0000001380)="0575c70458112c65c76dd6122758ccbb79cfb85cac885bae1df00d330d352fcb6eb9cccec626671365587eae14d7b85132f80d69fb59b86d223fa68c2ca5698c3e6cb10f2351719b84aef74c6eb862f7fa2cb4c0c58c0711e2c7b8200e3215b6ea010d898e2e9bb6df164d3d0977768c16ddbdb58c452a3715192f69831bed7347337d08819241cd9494bc0360052b1f99fe681d9a1280dc0fc6af91f835e53d1d6c01e857c00d1b9d66689b18e3207796580c1c2f34965cf83a35bbff92d9af03d6921303ffc8767aafa53834e6ff4ec5f5f0654c00a1f225d0f80c1953d6d7bb8a9084a8a335df5905", 0xea}, {&(0x7f0000001480)="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", 0xfa}], 0x3, &(0x7f00000015c0)=[{0x108, 0x10e, 0x8, "fec6ffa8ef181a58ca6c17e9152f62a19647fb7178d42f92716eca7e19cfa9716ea43490a1cb011a1f1c8a2c525a1e3a19a38e3a2098583fb8dfc398b8833bd7f3a8b8a9ca7b03ffed77cd5657a0a6991858066c75f728a59bb67af5fee93e9410b6e3482478125b297611ec8200634bf9c4ce258922a5fe96b0da3f3f75216f88f0c47b1f3facccd83ed07befc3725db1c4799f15164277df9f9b51d9beee5d98142e9b5d50c2bde0424ec9bde8b3644b307a29e71b357746027f79497f6caf7026d37fe1d0548fcbf8a0dbe875c4fcdb853f7a159d2286554fbc11aa3686c15d606085c7974fdb4c8a60fa373364b49a13a2"}, {0x108, 0x105, 0x5, "12ef3d1da9686fc58698f38e5f21c1a6c665f0b40ce19c0e58b3323bebe4ad41224b91d62da3f4acad8f2f254a1dcd54ace3ac71371bae3f470336011f6b502242bf6a3abb95b30b19a572928eb77f224808e47a288711aece9bfd0cc1fd2c0b2ee3fc253f3771bee5f77daaa3501d98c520cec307fe0170ee55e674153e0784184cf5373715f30c9f7805610039ad5d153315b603678e57076263144f564f5b9d54f0fe900613e7b882f92413af38c887296e8a41d7a54d3b5e3de4c84f8827b0d04bcda94bc7bcbe5919960d713c3e0c7f01c5cd5605f8a0736393d82e9780800021631643d70f78a509d075316c960c"}, {0xf0, 0x6, 0x1, "979e782d23933f4cc7773124abf175c05f12dbf60e00bbc380a4461f7add7f468afc14734f79500b31818b368c6235b85e7e763981ba46db0bda04df2b1bd84ed32988b4b5826ccbf5b648397cabce121522c54ee9f79bba6cb906721e5736c87cfcbb3c07aa7ad07729c926666a23ab125b6dd07a4321b1b045ee7869eb75226aed42378e72f797a0cd71087502ff419062a2526599c672358b64de30e42498f13198ed26bd6ead310a5a0750dbe2a5aef002366c4805fc7c0a105d1db09e08ad22071b39246d8afc1e609688b3f6b5d2888afbca109bcfd5e9"}, {0x60, 0x100, 0x1c83, "7544a46d4ca264541e5bf3deb2e5ddb559ee51f084a86cc60a2a856a0ff6b171da5a7e15b36beba1987f52dc78530e6934e3ada96bae71ef09df7e8b6635d43ba551f9d5ea727e5a2f"}, {0xb8, 0x0, 0x5, "118cdb1e466394043897e11acba2a22ae02bb67bd286068e3c4ec924fbf38bc2b130204034032712036c92600a80f351f9007d79f86f4261abf0138c17dfd0ddfb61514fd1ec35a7fea6a7e7165d5dd41d9eb409427716d1efa8c68ea6d7e7d0a809946d5063d3210d8d212e797d4f31d771bf9ca3bb39397c684f45805bffa5581311d90fb0dcd3fe5cab8076bb62028d08c101bca17243d5de40236ffaea73460b9df2"}, {0x30, 0xff, 0xbfee, "f0031da9c6e574330c5818a07da708829bf9b3b0bbafe3dd42ebf09d11"}], 0x448}, 0x0, 0x4000810, 0x1}, 0x4) 18:29:33 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) r0 = msgget$private(0x0, 0x24) msgsnd(r0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e25924414548737a705a8"}, 0x79, 0x0) 18:29:33 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x3176, &(0x7f00000011c0), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, &(0x7f0000001240), 0x0) 18:29:33 executing program 1: syz_io_uring_setup(0x3176, &(0x7f00000011c0)={0x0, 0x0, 0x2, 0x3, 0x261}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 18:29:33 executing program 2: syz_io_uring_setup(0x3176, 0x0, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, &(0x7f0000001240), 0x0) 18:29:33 executing program 3: r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r0, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r0, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r1, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f00000003c0)) r3 = accept4$x25(r2, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000003080)={&(0x7f0000002f80)={0x1d, 0x0, 0x3, {0x0, 0x1, 0x4}, 0x1}, 0x18, &(0x7f0000003040)={&(0x7f0000002fc0)="d5e9363607a3cd8107358a753de20d4cbf2a5a24da2dddde855ad5591801b3f220f45d758e17bdeee065791399b421fe320bd4bd06e93031343cc237f17d58e730a9e10d3825377f8ab678ab5ab7e664a9e7904f1074f9c673f375c8a228ce6560c705e76f577906fe3f8e501a8377e8ff3315ef00995f46fcc6", 0x7a}}, 0x24004800) recvfrom$x25(r3, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r3, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r4, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000030c0)={'team0\x00'}) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r5, 0x89e2, &(0x7f00000003c0)) r6 = accept4$x25(r5, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r6, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x133, 0xffffffffffffffff, 0x8000000) 18:29:33 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x3176, &(0x7f00000011c0), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_submit(0x0, r1, &(0x7f0000001a80)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001a40)={&(0x7f00000012c0)=@l2={0x1f, 0x9, @any, 0x63d, 0x2}, 0x80, &(0x7f0000001580)=[{&(0x7f0000001340)='`}', 0x2}, {&(0x7f0000001380)="0575c70458112c65c76dd6122758ccbb79cfb85cac885bae1df00d330d352fcb6eb9cccec626671365587eae14d7b85132f80d69fb59b86d223fa68c2ca5698c3e6cb10f2351719b84aef74c6eb862f7fa2cb4c0c58c0711e2c7b8200e3215b6ea010d898e2e9bb6df164d3d0977768c16ddbdb58c452a3715192f69831bed7347337d08819241cd9494bc0360052b1f99fe681d9a1280dc0fc6af91f835e53d1d6c01e857c00d1b9d66689b18e3207796580c1c2f34965cf83a35bbff92d9af03d6921303ffc8767aafa53834e6ff4ec5f5f0654c00a1f225d0f80c1953d6d7bb8a9084a8a335df5905", 0xea}, {&(0x7f0000001480)="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", 0xfa}], 0x3, &(0x7f00000015c0)=[{0x108, 0x10e, 0x8, "fec6ffa8ef181a58ca6c17e9152f62a19647fb7178d42f92716eca7e19cfa9716ea43490a1cb011a1f1c8a2c525a1e3a19a38e3a2098583fb8dfc398b8833bd7f3a8b8a9ca7b03ffed77cd5657a0a6991858066c75f728a59bb67af5fee93e9410b6e3482478125b297611ec8200634bf9c4ce258922a5fe96b0da3f3f75216f88f0c47b1f3facccd83ed07befc3725db1c4799f15164277df9f9b51d9beee5d98142e9b5d50c2bde0424ec9bde8b3644b307a29e71b357746027f79497f6caf7026d37fe1d0548fcbf8a0dbe875c4fcdb853f7a159d2286554fbc11aa3686c15d606085c7974fdb4c8a60fa373364b49a13a2"}, {0x108, 0x105, 0x5, "12ef3d1da9686fc58698f38e5f21c1a6c665f0b40ce19c0e58b3323bebe4ad41224b91d62da3f4acad8f2f254a1dcd54ace3ac71371bae3f470336011f6b502242bf6a3abb95b30b19a572928eb77f224808e47a288711aece9bfd0cc1fd2c0b2ee3fc253f3771bee5f77daaa3501d98c520cec307fe0170ee55e674153e0784184cf5373715f30c9f7805610039ad5d153315b603678e57076263144f564f5b9d54f0fe900613e7b882f92413af38c887296e8a41d7a54d3b5e3de4c84f8827b0d04bcda94bc7bcbe5919960d713c3e0c7f01c5cd5605f8a0736393d82e9780800021631643d70f78a509d075316c960c"}, {0xf0, 0x6, 0x1, "979e782d23933f4cc7773124abf175c05f12dbf60e00bbc380a4461f7add7f468afc14734f79500b31818b368c6235b85e7e763981ba46db0bda04df2b1bd84ed32988b4b5826ccbf5b648397cabce121522c54ee9f79bba6cb906721e5736c87cfcbb3c07aa7ad07729c926666a23ab125b6dd07a4321b1b045ee7869eb75226aed42378e72f797a0cd71087502ff419062a2526599c672358b64de30e42498f13198ed26bd6ead310a5a0750dbe2a5aef002366c4805fc7c0a105d1db09e08ad22071b39246d8afc1e609688b3f6b5d2888afbca109bcfd5e9"}, {0x60, 0x100, 0x1c83, "7544a46d4ca264541e5bf3deb2e5ddb559ee51f084a86cc60a2a856a0ff6b171da5a7e15b36beba1987f52dc78530e6934e3ada96bae71ef09df7e8b6635d43ba551f9d5ea727e5a2f"}, {0xb8, 0x0, 0x5, "118cdb1e466394043897e11acba2a22ae02bb67bd286068e3c4ec924fbf38bc2b130204034032712036c92600a80f351f9007d79f86f4261abf0138c17dfd0ddfb61514fd1ec35a7fea6a7e7165d5dd41d9eb409427716d1efa8c68ea6d7e7d0a809946d5063d3210d8d212e797d4f31d771bf9ca3bb39397c684f45805bffa5581311d90fb0dcd3fe5cab8076bb62028d08c101bca17243d5de40236ffaea73460b9df2"}, {0x30, 0xff, 0xbfee, "f0031da9c6e574330c5818a07da708829bf9b3b0bbafe3dd42ebf09d11"}], 0x448}, 0x0, 0x4000810, 0x1}, 0x4) 18:29:33 executing program 5: socket(0x1a, 0x5, 0x7) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000140)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="850000004200000001220600070000003f02e06396b406a66acaff3edb21a81a5d2646303f9fb4e318a14753e4dec5d51aac62bfbfaefb901e83de4325a7c22090b4edde2dcf02f4314012c7201558cafe0387f068b8447eab0e30ee0467e274bb8550881bc79b4d07244f94c5b4b9229b4dcfc5361b9cf1920e4530bd12be821806946c4d99eec456c1dad90477225ec3d0e590585dab5d3c7621ab112cb3d8227904a05dccac40fae6a3d6"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0xe4, &(0x7f0000000200)=""/228, 0x41000, 0x5, [], 0x0, 0x0, r0, 0x8, &(0x7f0000000340)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x4, 0x2}, 0x10, 0x2fa02}, 0x78) r1 = msgget$private(0x0, 0x114) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000500)=""/167) syz_io_uring_setup(0x3356, &(0x7f0000000000)={0x0, 0x4, 0x4, 0xfffffffe, 0x7a}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) 18:29:33 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) r0 = msgget$private(0x0, 0x24) msgsnd(r0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e25924414548737a705a8"}, 0x79, 0x0) 18:29:33 executing program 2: syz_io_uring_setup(0x3176, &(0x7f00000011c0), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, 0x0, 0x0) 18:29:33 executing program 3: r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r0, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r0, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r1, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f00000003c0)) r3 = accept4$x25(r2, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000003080)={&(0x7f0000002f80)={0x1d, 0x0, 0x3, {0x0, 0x1, 0x4}, 0x1}, 0x18, &(0x7f0000003040)={&(0x7f0000002fc0)="d5e9363607a3cd8107358a753de20d4cbf2a5a24da2dddde855ad5591801b3f220f45d758e17bdeee065791399b421fe320bd4bd06e93031343cc237f17d58e730a9e10d3825377f8ab678ab5ab7e664a9e7904f1074f9c673f375c8a228ce6560c705e76f577906fe3f8e501a8377e8ff3315ef00995f46fcc6", 0x7a}}, 0x24004800) recvfrom$x25(r3, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r3, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r4, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000030c0)={'team0\x00'}) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r5, 0x89e2, &(0x7f00000003c0)) accept4$x25(r5, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x133, 0xffffffffffffffff, 0x8000000) 18:29:33 executing program 1: syz_io_uring_setup(0x3176, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x261}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 18:29:33 executing program 5: socket(0x1a, 0x5, 0x7) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000140)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="850000004200000001220600070000003f02e06396b406a66acaff3edb21a81a5d2646303f9fb4e318a14753e4dec5d51aac62bfbfaefb901e83de4325a7c22090b4edde2dcf02f4314012c7201558cafe0387f068b8447eab0e30ee0467e274bb8550881bc79b4d07244f94c5b4b9229b4dcfc5361b9cf1920e4530bd12be821806946c4d99eec456c1dad90477225ec3d0e590585dab5d3c7621ab112cb3d8227904a05dccac40fae6a3d6"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0xe4, &(0x7f0000000200)=""/228, 0x41000, 0x5, [], 0x0, 0x0, r0, 0x8, &(0x7f0000000340)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x4, 0x2}, 0x10, 0x2fa02}, 0x78) r1 = msgget$private(0x0, 0x114) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000500)=""/167) syz_io_uring_setup(0x3356, &(0x7f0000000000)={0x0, 0x4, 0x4, 0xfffffffe, 0x7a}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) 18:29:33 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x3176, &(0x7f00000011c0), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_submit(0x0, r1, &(0x7f0000001a80)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001a40)={&(0x7f00000012c0)=@l2={0x1f, 0x9, @any, 0x63d, 0x2}, 0x80, &(0x7f0000001580)=[{&(0x7f0000001340)='`}', 0x2}, {&(0x7f0000001380)="0575c70458112c65c76dd6122758ccbb79cfb85cac885bae1df00d330d352fcb6eb9cccec626671365587eae14d7b85132f80d69fb59b86d223fa68c2ca5698c3e6cb10f2351719b84aef74c6eb862f7fa2cb4c0c58c0711e2c7b8200e3215b6ea010d898e2e9bb6df164d3d0977768c16ddbdb58c452a3715192f69831bed7347337d08819241cd9494bc0360052b1f99fe681d9a1280dc0fc6af91f835e53d1d6c01e857c00d1b9d66689b18e3207796580c1c2f34965cf83a35bbff92d9af03d6921303ffc8767aafa53834e6ff4ec5f5f0654c00a1f225d0f80c1953d6d7bb8a9084a8a335df5905", 0xea}, {&(0x7f0000001480)="0cd4855eb4d642558c27df6a526f005405089aa3a3c7368f2ef6471e27cadcd319ecc7f597964b92ec3d5024e615555f626a88d31dd5bef4467b76c9dce723b74776177edfad907da1de429947a26bb7ac340f9d77ad6b7f2ca8c376b2de0e7a27e70c395ef3e898695e1b4c92d63de41ec66fbcc4c30095165d2f3178bfa30e040d36f7a4978a5c663abd98946207e6491fe1b085613f5cc1781da936903bd9c18a5036a440f9bedfa53924e8098ea0887e1ccbabeae31fc29d1a17348098e2eaf1e7683a6eadea889bff4fe47cded92ffacd79d03417352870ae67e658319cecb204b55b3308d2d5fa93d90708f27975cdf3aad2a30b298c60", 0xfa}], 0x3, &(0x7f00000015c0)=[{0x108, 0x10e, 0x8, "fec6ffa8ef181a58ca6c17e9152f62a19647fb7178d42f92716eca7e19cfa9716ea43490a1cb011a1f1c8a2c525a1e3a19a38e3a2098583fb8dfc398b8833bd7f3a8b8a9ca7b03ffed77cd5657a0a6991858066c75f728a59bb67af5fee93e9410b6e3482478125b297611ec8200634bf9c4ce258922a5fe96b0da3f3f75216f88f0c47b1f3facccd83ed07befc3725db1c4799f15164277df9f9b51d9beee5d98142e9b5d50c2bde0424ec9bde8b3644b307a29e71b357746027f79497f6caf7026d37fe1d0548fcbf8a0dbe875c4fcdb853f7a159d2286554fbc11aa3686c15d606085c7974fdb4c8a60fa373364b49a13a2"}, {0x108, 0x105, 0x5, "12ef3d1da9686fc58698f38e5f21c1a6c665f0b40ce19c0e58b3323bebe4ad41224b91d62da3f4acad8f2f254a1dcd54ace3ac71371bae3f470336011f6b502242bf6a3abb95b30b19a572928eb77f224808e47a288711aece9bfd0cc1fd2c0b2ee3fc253f3771bee5f77daaa3501d98c520cec307fe0170ee55e674153e0784184cf5373715f30c9f7805610039ad5d153315b603678e57076263144f564f5b9d54f0fe900613e7b882f92413af38c887296e8a41d7a54d3b5e3de4c84f8827b0d04bcda94bc7bcbe5919960d713c3e0c7f01c5cd5605f8a0736393d82e9780800021631643d70f78a509d075316c960c"}, {0xf0, 0x6, 0x1, "979e782d23933f4cc7773124abf175c05f12dbf60e00bbc380a4461f7add7f468afc14734f79500b31818b368c6235b85e7e763981ba46db0bda04df2b1bd84ed32988b4b5826ccbf5b648397cabce121522c54ee9f79bba6cb906721e5736c87cfcbb3c07aa7ad07729c926666a23ab125b6dd07a4321b1b045ee7869eb75226aed42378e72f797a0cd71087502ff419062a2526599c672358b64de30e42498f13198ed26bd6ead310a5a0750dbe2a5aef002366c4805fc7c0a105d1db09e08ad22071b39246d8afc1e609688b3f6b5d2888afbca109bcfd5e9"}, {0x60, 0x100, 0x1c83, "7544a46d4ca264541e5bf3deb2e5ddb559ee51f084a86cc60a2a856a0ff6b171da5a7e15b36beba1987f52dc78530e6934e3ada96bae71ef09df7e8b6635d43ba551f9d5ea727e5a2f"}, {0xb8, 0x0, 0x5, "118cdb1e466394043897e11acba2a22ae02bb67bd286068e3c4ec924fbf38bc2b130204034032712036c92600a80f351f9007d79f86f4261abf0138c17dfd0ddfb61514fd1ec35a7fea6a7e7165d5dd41d9eb409427716d1efa8c68ea6d7e7d0a809946d5063d3210d8d212e797d4f31d771bf9ca3bb39397c684f45805bffa5581311d90fb0dcd3fe5cab8076bb62028d08c101bca17243d5de40236ffaea73460b9df2"}, {0x30, 0xff, 0xbfee, "f0031da9c6e574330c5818a07da708829bf9b3b0bbafe3dd42ebf09d11"}], 0x448}, 0x0, 0x4000810, 0x1}, 0x4) 18:29:33 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) r0 = msgget$private(0x0, 0x24) msgsnd(r0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e25924414548737a705a8"}, 0x79, 0x0) 18:29:33 executing program 1: syz_io_uring_setup(0x3176, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x261}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 18:29:33 executing program 5: socket(0x1a, 0x5, 0x7) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000140)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="850000004200000001220600070000003f02e06396b406a66acaff3edb21a81a5d2646303f9fb4e318a14753e4dec5d51aac62bfbfaefb901e83de4325a7c22090b4edde2dcf02f4314012c7201558cafe0387f068b8447eab0e30ee0467e274bb8550881bc79b4d07244f94c5b4b9229b4dcfc5361b9cf1920e4530bd12be821806946c4d99eec456c1dad90477225ec3d0e590585dab5d3c7621ab112cb3d8227904a05dccac40fae6a3d6"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0xe4, &(0x7f0000000200)=""/228, 0x41000, 0x5, [], 0x0, 0x0, r0, 0x8, &(0x7f0000000340)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x4, 0x2}, 0x10, 0x2fa02}, 0x78) r1 = msgget$private(0x0, 0x114) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000500)=""/167) syz_io_uring_setup(0x3356, &(0x7f0000000000)={0x0, 0x4, 0x4, 0xfffffffe, 0x7a}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) 18:29:33 executing program 2: syz_io_uring_setup(0x3176, &(0x7f00000011c0), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, 0x0, 0x0) 18:29:33 executing program 3: r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r0, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r0, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r1, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f00000003c0)) r3 = accept4$x25(r2, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000003080)={&(0x7f0000002f80)={0x1d, 0x0, 0x3, {0x0, 0x1, 0x4}, 0x1}, 0x18, &(0x7f0000003040)={&(0x7f0000002fc0)="d5e9363607a3cd8107358a753de20d4cbf2a5a24da2dddde855ad5591801b3f220f45d758e17bdeee065791399b421fe320bd4bd06e93031343cc237f17d58e730a9e10d3825377f8ab678ab5ab7e664a9e7904f1074f9c673f375c8a228ce6560c705e76f577906fe3f8e501a8377e8ff3315ef00995f46fcc6", 0x7a}}, 0x24004800) recvfrom$x25(r3, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r3, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r4, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000030c0)={'team0\x00'}) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r5, 0x89e2, &(0x7f00000003c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x133, 0xffffffffffffffff, 0x8000000) 18:29:33 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x3176, &(0x7f00000011c0), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_submit(0x0, r1, &(0x7f0000001a80)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001a40)={&(0x7f00000012c0)=@l2={0x1f, 0x9, @any, 0x63d, 0x2}, 0x80, &(0x7f0000001580)=[{&(0x7f0000001340)='`}', 0x2}, {&(0x7f0000001380)="0575c70458112c65c76dd6122758ccbb79cfb85cac885bae1df00d330d352fcb6eb9cccec626671365587eae14d7b85132f80d69fb59b86d223fa68c2ca5698c3e6cb10f2351719b84aef74c6eb862f7fa2cb4c0c58c0711e2c7b8200e3215b6ea010d898e2e9bb6df164d3d0977768c16ddbdb58c452a3715192f69831bed7347337d08819241cd9494bc0360052b1f99fe681d9a1280dc0fc6af91f835e53d1d6c01e857c00d1b9d66689b18e3207796580c1c2f34965cf83a35bbff92d9af03d6921303ffc8767aafa53834e6ff4ec5f5f0654c00a1f225d0f80c1953d6d7bb8a9084a8a335df5905", 0xea}, {&(0x7f0000001480)="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", 0xfa}], 0x3, &(0x7f00000015c0)=[{0x108, 0x10e, 0x8, "fec6ffa8ef181a58ca6c17e9152f62a19647fb7178d42f92716eca7e19cfa9716ea43490a1cb011a1f1c8a2c525a1e3a19a38e3a2098583fb8dfc398b8833bd7f3a8b8a9ca7b03ffed77cd5657a0a6991858066c75f728a59bb67af5fee93e9410b6e3482478125b297611ec8200634bf9c4ce258922a5fe96b0da3f3f75216f88f0c47b1f3facccd83ed07befc3725db1c4799f15164277df9f9b51d9beee5d98142e9b5d50c2bde0424ec9bde8b3644b307a29e71b357746027f79497f6caf7026d37fe1d0548fcbf8a0dbe875c4fcdb853f7a159d2286554fbc11aa3686c15d606085c7974fdb4c8a60fa373364b49a13a2"}, {0x108, 0x105, 0x5, "12ef3d1da9686fc58698f38e5f21c1a6c665f0b40ce19c0e58b3323bebe4ad41224b91d62da3f4acad8f2f254a1dcd54ace3ac71371bae3f470336011f6b502242bf6a3abb95b30b19a572928eb77f224808e47a288711aece9bfd0cc1fd2c0b2ee3fc253f3771bee5f77daaa3501d98c520cec307fe0170ee55e674153e0784184cf5373715f30c9f7805610039ad5d153315b603678e57076263144f564f5b9d54f0fe900613e7b882f92413af38c887296e8a41d7a54d3b5e3de4c84f8827b0d04bcda94bc7bcbe5919960d713c3e0c7f01c5cd5605f8a0736393d82e9780800021631643d70f78a509d075316c960c"}, {0xf0, 0x6, 0x1, "979e782d23933f4cc7773124abf175c05f12dbf60e00bbc380a4461f7add7f468afc14734f79500b31818b368c6235b85e7e763981ba46db0bda04df2b1bd84ed32988b4b5826ccbf5b648397cabce121522c54ee9f79bba6cb906721e5736c87cfcbb3c07aa7ad07729c926666a23ab125b6dd07a4321b1b045ee7869eb75226aed42378e72f797a0cd71087502ff419062a2526599c672358b64de30e42498f13198ed26bd6ead310a5a0750dbe2a5aef002366c4805fc7c0a105d1db09e08ad22071b39246d8afc1e609688b3f6b5d2888afbca109bcfd5e9"}, {0x60, 0x100, 0x1c83, "7544a46d4ca264541e5bf3deb2e5ddb559ee51f084a86cc60a2a856a0ff6b171da5a7e15b36beba1987f52dc78530e6934e3ada96bae71ef09df7e8b6635d43ba551f9d5ea727e5a2f"}, {0xb8, 0x0, 0x5, "118cdb1e466394043897e11acba2a22ae02bb67bd286068e3c4ec924fbf38bc2b130204034032712036c92600a80f351f9007d79f86f4261abf0138c17dfd0ddfb61514fd1ec35a7fea6a7e7165d5dd41d9eb409427716d1efa8c68ea6d7e7d0a809946d5063d3210d8d212e797d4f31d771bf9ca3bb39397c684f45805bffa5581311d90fb0dcd3fe5cab8076bb62028d08c101bca17243d5de40236ffaea73460b9df2"}, {0x30, 0xff, 0xbfee, "f0031da9c6e574330c5818a07da708829bf9b3b0bbafe3dd42ebf09d11"}], 0x448}, 0x0, 0x4000810, 0x1}, 0x4) 18:29:33 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) msgsnd(0x0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e25924414548737a705a8"}, 0x79, 0x0) 18:29:33 executing program 5: socket(0x1a, 0x5, 0x7) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000140)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="850000004200000001220600070000003f02e06396b406a66acaff3edb21a81a5d2646303f9fb4e318a14753e4dec5d51aac62bfbfaefb901e83de4325a7c22090b4edde2dcf02f4314012c7201558cafe0387f068b8447eab0e30ee0467e274bb8550881bc79b4d07244f94c5b4b9229b4dcfc5361b9cf1920e4530bd12be821806946c4d99eec456c1dad90477225ec3d0e590585dab5d3c7621ab112cb3d8227904a05dccac40fae6a3d6"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0xe4, &(0x7f0000000200)=""/228, 0x41000, 0x5, [], 0x0, 0x0, r0, 0x8, &(0x7f0000000340)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x4, 0x2}, 0x10, 0x2fa02}, 0x78) r1 = msgget$private(0x0, 0x114) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000500)=""/167) 18:29:33 executing program 1: syz_io_uring_setup(0x3176, &(0x7f00000011c0), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 18:29:33 executing program 2: syz_io_uring_setup(0x3176, &(0x7f00000011c0), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, 0x0, 0x0) 18:29:33 executing program 3: r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r0, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r0, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r1, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f00000003c0)) r3 = accept4$x25(r2, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000003080)={&(0x7f0000002f80)={0x1d, 0x0, 0x3, {0x0, 0x1, 0x4}, 0x1}, 0x18, &(0x7f0000003040)={&(0x7f0000002fc0)="d5e9363607a3cd8107358a753de20d4cbf2a5a24da2dddde855ad5591801b3f220f45d758e17bdeee065791399b421fe320bd4bd06e93031343cc237f17d58e730a9e10d3825377f8ab678ab5ab7e664a9e7904f1074f9c673f375c8a228ce6560c705e76f577906fe3f8e501a8377e8ff3315ef00995f46fcc6", 0x7a}}, 0x24004800) recvfrom$x25(r3, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r3, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r4, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000030c0)={'team0\x00'}) syz_init_net_socket$x25(0x9, 0x5, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x133, 0xffffffffffffffff, 0x8000000) 18:29:33 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x3176, &(0x7f00000011c0), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, &(0x7f0000001240)=0x0, &(0x7f0000001280)) syz_io_uring_submit(r1, 0x0, &(0x7f0000001a80)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001a40)={&(0x7f00000012c0)=@l2={0x1f, 0x9, @any, 0x63d, 0x2}, 0x80, &(0x7f0000001580)=[{&(0x7f0000001340)='`}', 0x2}, {&(0x7f0000001380)="0575c70458112c65c76dd6122758ccbb79cfb85cac885bae1df00d330d352fcb6eb9cccec626671365587eae14d7b85132f80d69fb59b86d223fa68c2ca5698c3e6cb10f2351719b84aef74c6eb862f7fa2cb4c0c58c0711e2c7b8200e3215b6ea010d898e2e9bb6df164d3d0977768c16ddbdb58c452a3715192f69831bed7347337d08819241cd9494bc0360052b1f99fe681d9a1280dc0fc6af91f835e53d1d6c01e857c00d1b9d66689b18e3207796580c1c2f34965cf83a35bbff92d9af03d6921303ffc8767aafa53834e6ff4ec5f5f0654c00a1f225d0f80c1953d6d7bb8a9084a8a335df5905", 0xea}, {&(0x7f0000001480)="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", 0xfa}], 0x3, &(0x7f00000015c0)=[{0x108, 0x10e, 0x8, "fec6ffa8ef181a58ca6c17e9152f62a19647fb7178d42f92716eca7e19cfa9716ea43490a1cb011a1f1c8a2c525a1e3a19a38e3a2098583fb8dfc398b8833bd7f3a8b8a9ca7b03ffed77cd5657a0a6991858066c75f728a59bb67af5fee93e9410b6e3482478125b297611ec8200634bf9c4ce258922a5fe96b0da3f3f75216f88f0c47b1f3facccd83ed07befc3725db1c4799f15164277df9f9b51d9beee5d98142e9b5d50c2bde0424ec9bde8b3644b307a29e71b357746027f79497f6caf7026d37fe1d0548fcbf8a0dbe875c4fcdb853f7a159d2286554fbc11aa3686c15d606085c7974fdb4c8a60fa373364b49a13a2"}, {0x108, 0x105, 0x5, "12ef3d1da9686fc58698f38e5f21c1a6c665f0b40ce19c0e58b3323bebe4ad41224b91d62da3f4acad8f2f254a1dcd54ace3ac71371bae3f470336011f6b502242bf6a3abb95b30b19a572928eb77f224808e47a288711aece9bfd0cc1fd2c0b2ee3fc253f3771bee5f77daaa3501d98c520cec307fe0170ee55e674153e0784184cf5373715f30c9f7805610039ad5d153315b603678e57076263144f564f5b9d54f0fe900613e7b882f92413af38c887296e8a41d7a54d3b5e3de4c84f8827b0d04bcda94bc7bcbe5919960d713c3e0c7f01c5cd5605f8a0736393d82e9780800021631643d70f78a509d075316c960c"}, {0xf0, 0x6, 0x1, "979e782d23933f4cc7773124abf175c05f12dbf60e00bbc380a4461f7add7f468afc14734f79500b31818b368c6235b85e7e763981ba46db0bda04df2b1bd84ed32988b4b5826ccbf5b648397cabce121522c54ee9f79bba6cb906721e5736c87cfcbb3c07aa7ad07729c926666a23ab125b6dd07a4321b1b045ee7869eb75226aed42378e72f797a0cd71087502ff419062a2526599c672358b64de30e42498f13198ed26bd6ead310a5a0750dbe2a5aef002366c4805fc7c0a105d1db09e08ad22071b39246d8afc1e609688b3f6b5d2888afbca109bcfd5e9"}, {0x60, 0x100, 0x1c83, "7544a46d4ca264541e5bf3deb2e5ddb559ee51f084a86cc60a2a856a0ff6b171da5a7e15b36beba1987f52dc78530e6934e3ada96bae71ef09df7e8b6635d43ba551f9d5ea727e5a2f"}, {0xb8, 0x0, 0x5, "118cdb1e466394043897e11acba2a22ae02bb67bd286068e3c4ec924fbf38bc2b130204034032712036c92600a80f351f9007d79f86f4261abf0138c17dfd0ddfb61514fd1ec35a7fea6a7e7165d5dd41d9eb409427716d1efa8c68ea6d7e7d0a809946d5063d3210d8d212e797d4f31d771bf9ca3bb39397c684f45805bffa5581311d90fb0dcd3fe5cab8076bb62028d08c101bca17243d5de40236ffaea73460b9df2"}, {0x30, 0xff, 0xbfee, "f0031da9c6e574330c5818a07da708829bf9b3b0bbafe3dd42ebf09d11"}], 0x448}, 0x0, 0x4000810, 0x1}, 0x4) 18:29:33 executing program 5: socket(0x1a, 0x5, 0x7) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000140)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="850000004200000001220600070000003f02e06396b406a66acaff3edb21a81a5d2646303f9fb4e318a14753e4dec5d51aac62bfbfaefb901e83de4325a7c22090b4edde2dcf02f4314012c7201558cafe0387f068b8447eab0e30ee0467e274bb8550881bc79b4d07244f94c5b4b9229b4dcfc5361b9cf1920e4530bd12be821806946c4d99eec456c1dad90477225ec3d0e590585dab5d3c7621ab112cb3d8227904a05dccac40fae6a3d6"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0xe4, &(0x7f0000000200)=""/228, 0x41000, 0x5, [], 0x0, 0x0, r0, 0x8, &(0x7f0000000340)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x4, 0x2}, 0x10, 0x2fa02}, 0x78) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000500)=""/167) 18:29:33 executing program 1: syz_io_uring_setup(0x3176, &(0x7f00000011c0), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, 0x0, &(0x7f0000001280)) 18:29:33 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x3176, &(0x7f00000011c0), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, &(0x7f0000001240)=0x0, &(0x7f0000001280)) syz_io_uring_submit(r1, 0x0, &(0x7f0000001a80)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001a40)={&(0x7f00000012c0)=@l2={0x1f, 0x9, @any, 0x63d, 0x2}, 0x80, &(0x7f0000001580)=[{&(0x7f0000001340)='`}', 0x2}, {&(0x7f0000001380)="0575c70458112c65c76dd6122758ccbb79cfb85cac885bae1df00d330d352fcb6eb9cccec626671365587eae14d7b85132f80d69fb59b86d223fa68c2ca5698c3e6cb10f2351719b84aef74c6eb862f7fa2cb4c0c58c0711e2c7b8200e3215b6ea010d898e2e9bb6df164d3d0977768c16ddbdb58c452a3715192f69831bed7347337d08819241cd9494bc0360052b1f99fe681d9a1280dc0fc6af91f835e53d1d6c01e857c00d1b9d66689b18e3207796580c1c2f34965cf83a35bbff92d9af03d6921303ffc8767aafa53834e6ff4ec5f5f0654c00a1f225d0f80c1953d6d7bb8a9084a8a335df5905", 0xea}, {&(0x7f0000001480)="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", 0xfa}], 0x3, &(0x7f00000015c0)=[{0x108, 0x10e, 0x8, "fec6ffa8ef181a58ca6c17e9152f62a19647fb7178d42f92716eca7e19cfa9716ea43490a1cb011a1f1c8a2c525a1e3a19a38e3a2098583fb8dfc398b8833bd7f3a8b8a9ca7b03ffed77cd5657a0a6991858066c75f728a59bb67af5fee93e9410b6e3482478125b297611ec8200634bf9c4ce258922a5fe96b0da3f3f75216f88f0c47b1f3facccd83ed07befc3725db1c4799f15164277df9f9b51d9beee5d98142e9b5d50c2bde0424ec9bde8b3644b307a29e71b357746027f79497f6caf7026d37fe1d0548fcbf8a0dbe875c4fcdb853f7a159d2286554fbc11aa3686c15d606085c7974fdb4c8a60fa373364b49a13a2"}, {0x108, 0x105, 0x5, "12ef3d1da9686fc58698f38e5f21c1a6c665f0b40ce19c0e58b3323bebe4ad41224b91d62da3f4acad8f2f254a1dcd54ace3ac71371bae3f470336011f6b502242bf6a3abb95b30b19a572928eb77f224808e47a288711aece9bfd0cc1fd2c0b2ee3fc253f3771bee5f77daaa3501d98c520cec307fe0170ee55e674153e0784184cf5373715f30c9f7805610039ad5d153315b603678e57076263144f564f5b9d54f0fe900613e7b882f92413af38c887296e8a41d7a54d3b5e3de4c84f8827b0d04bcda94bc7bcbe5919960d713c3e0c7f01c5cd5605f8a0736393d82e9780800021631643d70f78a509d075316c960c"}, {0xf0, 0x6, 0x1, "979e782d23933f4cc7773124abf175c05f12dbf60e00bbc380a4461f7add7f468afc14734f79500b31818b368c6235b85e7e763981ba46db0bda04df2b1bd84ed32988b4b5826ccbf5b648397cabce121522c54ee9f79bba6cb906721e5736c87cfcbb3c07aa7ad07729c926666a23ab125b6dd07a4321b1b045ee7869eb75226aed42378e72f797a0cd71087502ff419062a2526599c672358b64de30e42498f13198ed26bd6ead310a5a0750dbe2a5aef002366c4805fc7c0a105d1db09e08ad22071b39246d8afc1e609688b3f6b5d2888afbca109bcfd5e9"}, {0x60, 0x100, 0x1c83, "7544a46d4ca264541e5bf3deb2e5ddb559ee51f084a86cc60a2a856a0ff6b171da5a7e15b36beba1987f52dc78530e6934e3ada96bae71ef09df7e8b6635d43ba551f9d5ea727e5a2f"}, {0xb8, 0x0, 0x5, "118cdb1e466394043897e11acba2a22ae02bb67bd286068e3c4ec924fbf38bc2b130204034032712036c92600a80f351f9007d79f86f4261abf0138c17dfd0ddfb61514fd1ec35a7fea6a7e7165d5dd41d9eb409427716d1efa8c68ea6d7e7d0a809946d5063d3210d8d212e797d4f31d771bf9ca3bb39397c684f45805bffa5581311d90fb0dcd3fe5cab8076bb62028d08c101bca17243d5de40236ffaea73460b9df2"}, {0x30, 0xff, 0xbfee, "f0031da9c6e574330c5818a07da708829bf9b3b0bbafe3dd42ebf09d11"}], 0x448}, 0x0, 0x4000810, 0x1}, 0x4) 18:29:33 executing program 2: socket(0x1a, 0x5, 0x7) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000140)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="850000004200000001220600070000003f02e06396b406a66acaff3edb21a81a5d2646303f9fb4e318a14753e4dec5d51aac62bfbfaefb901e83de4325a7c22090b4edde2dcf02f4314012c7201558cafe0387f068b8447eab0e30ee0467e274bb8550881bc79b4d07244f94c5b4b9229b4dcfc5361b9cf1920e4530bd12be821806946c4d99eec456c1dad90477225ec3d0e590585dab5d3c7621ab112cb3d8227904a05dccac40fae6a3d6"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0xe4, &(0x7f0000000200)=""/228, 0x41000, 0x5, [], 0x0, 0x0, r0, 0x8, &(0x7f0000000340)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x4, 0x2}, 0x10, 0x2fa02}, 0x78) r1 = msgget$private(0x0, 0x114) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000500)=""/167) syz_io_uring_setup(0x3356, &(0x7f0000000000)={0x0, 0x4, 0x4, 0xfffffffe, 0x7a}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) 18:29:33 executing program 4: msgsnd(0x0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e25924414548737a705a8"}, 0x79, 0x0) 18:29:33 executing program 3: r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r0, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r0, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r1, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f00000003c0)) r3 = accept4$x25(r2, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000003080)={&(0x7f0000002f80)={0x1d, 0x0, 0x3, {0x0, 0x1, 0x4}, 0x1}, 0x18, &(0x7f0000003040)={&(0x7f0000002fc0)="d5e9363607a3cd8107358a753de20d4cbf2a5a24da2dddde855ad5591801b3f220f45d758e17bdeee065791399b421fe320bd4bd06e93031343cc237f17d58e730a9e10d3825377f8ab678ab5ab7e664a9e7904f1074f9c673f375c8a228ce6560c705e76f577906fe3f8e501a8377e8ff3315ef00995f46fcc6", 0x7a}}, 0x24004800) recvfrom$x25(r3, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r3, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r4, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000030c0)={'team0\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x133, 0xffffffffffffffff, 0x8000000) 18:29:34 executing program 5: socket(0x1a, 0x5, 0x7) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000140)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="850000004200000001220600070000003f02e06396b406a66acaff3edb21a81a5d2646303f9fb4e318a14753e4dec5d51aac62bfbfaefb901e83de4325a7c22090b4edde2dcf02f4314012c7201558cafe0387f068b8447eab0e30ee0467e274bb8550881bc79b4d07244f94c5b4b9229b4dcfc5361b9cf1920e4530bd12be821806946c4d99eec456c1dad90477225ec3d0e590585dab5d3c7621ab112cb3d8227904a05dccac40fae6a3d6"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0xe4, &(0x7f0000000200)=""/228, 0x41000, 0x5, [], 0x0, 0x0, r0, 0x8, &(0x7f0000000340)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x4, 0x2}, 0x10, 0x2fa02}, 0x78) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000500)=""/167) 18:29:34 executing program 2: socket(0x1a, 0x5, 0x7) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000140)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="850000004200000001220600070000003f02e06396b406a66acaff3edb21a81a5d2646303f9fb4e318a14753e4dec5d51aac62bfbfaefb901e83de4325a7c22090b4edde2dcf02f4314012c7201558cafe0387f068b8447eab0e30ee0467e274bb8550881bc79b4d07244f94c5b4b9229b4dcfc5361b9cf1920e4530bd12be821806946c4d99eec456c1dad90477225ec3d0e590585dab5d3c7621ab112cb3d8227904a05dccac40fae6a3d6"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0xe4, &(0x7f0000000200)=""/228, 0x41000, 0x5, [], 0x0, 0x0, r0, 0x8, &(0x7f0000000340)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x4, 0x2}, 0x10, 0x2fa02}, 0x78) r1 = msgget$private(0x0, 0x114) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000500)=""/167) syz_io_uring_setup(0x3356, &(0x7f0000000000)={0x0, 0x4, 0x4, 0xfffffffe, 0x7a}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) 18:29:34 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x3176, &(0x7f00000011c0), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, &(0x7f0000001240)=0x0, &(0x7f0000001280)) syz_io_uring_submit(r1, 0x0, &(0x7f0000001a80)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001a40)={&(0x7f00000012c0)=@l2={0x1f, 0x9, @any, 0x63d, 0x2}, 0x80, &(0x7f0000001580)=[{&(0x7f0000001340)='`}', 0x2}, {&(0x7f0000001380)="0575c70458112c65c76dd6122758ccbb79cfb85cac885bae1df00d330d352fcb6eb9cccec626671365587eae14d7b85132f80d69fb59b86d223fa68c2ca5698c3e6cb10f2351719b84aef74c6eb862f7fa2cb4c0c58c0711e2c7b8200e3215b6ea010d898e2e9bb6df164d3d0977768c16ddbdb58c452a3715192f69831bed7347337d08819241cd9494bc0360052b1f99fe681d9a1280dc0fc6af91f835e53d1d6c01e857c00d1b9d66689b18e3207796580c1c2f34965cf83a35bbff92d9af03d6921303ffc8767aafa53834e6ff4ec5f5f0654c00a1f225d0f80c1953d6d7bb8a9084a8a335df5905", 0xea}, {&(0x7f0000001480)="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", 0xfa}], 0x3, &(0x7f00000015c0)=[{0x108, 0x10e, 0x8, "fec6ffa8ef181a58ca6c17e9152f62a19647fb7178d42f92716eca7e19cfa9716ea43490a1cb011a1f1c8a2c525a1e3a19a38e3a2098583fb8dfc398b8833bd7f3a8b8a9ca7b03ffed77cd5657a0a6991858066c75f728a59bb67af5fee93e9410b6e3482478125b297611ec8200634bf9c4ce258922a5fe96b0da3f3f75216f88f0c47b1f3facccd83ed07befc3725db1c4799f15164277df9f9b51d9beee5d98142e9b5d50c2bde0424ec9bde8b3644b307a29e71b357746027f79497f6caf7026d37fe1d0548fcbf8a0dbe875c4fcdb853f7a159d2286554fbc11aa3686c15d606085c7974fdb4c8a60fa373364b49a13a2"}, {0x108, 0x105, 0x5, "12ef3d1da9686fc58698f38e5f21c1a6c665f0b40ce19c0e58b3323bebe4ad41224b91d62da3f4acad8f2f254a1dcd54ace3ac71371bae3f470336011f6b502242bf6a3abb95b30b19a572928eb77f224808e47a288711aece9bfd0cc1fd2c0b2ee3fc253f3771bee5f77daaa3501d98c520cec307fe0170ee55e674153e0784184cf5373715f30c9f7805610039ad5d153315b603678e57076263144f564f5b9d54f0fe900613e7b882f92413af38c887296e8a41d7a54d3b5e3de4c84f8827b0d04bcda94bc7bcbe5919960d713c3e0c7f01c5cd5605f8a0736393d82e9780800021631643d70f78a509d075316c960c"}, {0xf0, 0x6, 0x1, "979e782d23933f4cc7773124abf175c05f12dbf60e00bbc380a4461f7add7f468afc14734f79500b31818b368c6235b85e7e763981ba46db0bda04df2b1bd84ed32988b4b5826ccbf5b648397cabce121522c54ee9f79bba6cb906721e5736c87cfcbb3c07aa7ad07729c926666a23ab125b6dd07a4321b1b045ee7869eb75226aed42378e72f797a0cd71087502ff419062a2526599c672358b64de30e42498f13198ed26bd6ead310a5a0750dbe2a5aef002366c4805fc7c0a105d1db09e08ad22071b39246d8afc1e609688b3f6b5d2888afbca109bcfd5e9"}, {0x60, 0x100, 0x1c83, "7544a46d4ca264541e5bf3deb2e5ddb559ee51f084a86cc60a2a856a0ff6b171da5a7e15b36beba1987f52dc78530e6934e3ada96bae71ef09df7e8b6635d43ba551f9d5ea727e5a2f"}, {0xb8, 0x0, 0x5, "118cdb1e466394043897e11acba2a22ae02bb67bd286068e3c4ec924fbf38bc2b130204034032712036c92600a80f351f9007d79f86f4261abf0138c17dfd0ddfb61514fd1ec35a7fea6a7e7165d5dd41d9eb409427716d1efa8c68ea6d7e7d0a809946d5063d3210d8d212e797d4f31d771bf9ca3bb39397c684f45805bffa5581311d90fb0dcd3fe5cab8076bb62028d08c101bca17243d5de40236ffaea73460b9df2"}, {0x30, 0xff, 0xbfee, "f0031da9c6e574330c5818a07da708829bf9b3b0bbafe3dd42ebf09d11"}], 0x448}, 0x0, 0x4000810, 0x1}, 0x4) 18:29:34 executing program 1: syz_io_uring_setup(0x3176, &(0x7f00000011c0), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, 0x0, &(0x7f0000001280)) 18:29:34 executing program 4: msgsnd(0x0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e25924414548737a705a8"}, 0x79, 0x0) 18:29:34 executing program 3: r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r0, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r0, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r1, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f00000003c0)) r3 = accept4$x25(r2, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000003080)={&(0x7f0000002f80)={0x1d, 0x0, 0x3, {0x0, 0x1, 0x4}, 0x1}, 0x18, &(0x7f0000003040)={&(0x7f0000002fc0)="d5e9363607a3cd8107358a753de20d4cbf2a5a24da2dddde855ad5591801b3f220f45d758e17bdeee065791399b421fe320bd4bd06e93031343cc237f17d58e730a9e10d3825377f8ab678ab5ab7e664a9e7904f1074f9c673f375c8a228ce6560c705e76f577906fe3f8e501a8377e8ff3315ef00995f46fcc6", 0x7a}}, 0x24004800) recvfrom$x25(r3, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r3, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r4, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x133, 0xffffffffffffffff, 0x8000000) 18:29:34 executing program 2: socket(0x1a, 0x5, 0x7) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000140)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="850000004200000001220600070000003f02e06396b406a66acaff3edb21a81a5d2646303f9fb4e318a14753e4dec5d51aac62bfbfaefb901e83de4325a7c22090b4edde2dcf02f4314012c7201558cafe0387f068b8447eab0e30ee0467e274bb8550881bc79b4d07244f94c5b4b9229b4dcfc5361b9cf1920e4530bd12be821806946c4d99eec456c1dad90477225ec3d0e590585dab5d3c7621ab112cb3d8227904a05dccac40fae6a3d6"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0xe4, &(0x7f0000000200)=""/228, 0x41000, 0x5, [], 0x0, 0x0, r0, 0x8, &(0x7f0000000340)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x4, 0x2}, 0x10, 0x2fa02}, 0x78) r1 = msgget$private(0x0, 0x114) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000500)=""/167) syz_io_uring_setup(0x3356, &(0x7f0000000000)={0x0, 0x4, 0x4, 0xfffffffe, 0x7a}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) 18:29:34 executing program 5: socket(0x1a, 0x5, 0x7) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000140)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="850000004200000001220600070000003f02e06396b406a66acaff3edb21a81a5d2646303f9fb4e318a14753e4dec5d51aac62bfbfaefb901e83de4325a7c22090b4edde2dcf02f4314012c7201558cafe0387f068b8447eab0e30ee0467e274bb8550881bc79b4d07244f94c5b4b9229b4dcfc5361b9cf1920e4530bd12be821806946c4d99eec456c1dad90477225ec3d0e590585dab5d3c7621ab112cb3d8227904a05dccac40fae6a3d6"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0xe4, &(0x7f0000000200)=""/228, 0x41000, 0x5, [], 0x0, 0x0, r0, 0x8, &(0x7f0000000340)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x4, 0x2}, 0x10, 0x2fa02}, 0x78) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000500)=""/167) 18:29:34 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x3176, &(0x7f00000011c0), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, &(0x7f0000001240)=0x0, &(0x7f0000001280)) syz_io_uring_submit(r2, r1, 0x0, 0x4) 18:29:34 executing program 1: syz_io_uring_setup(0x3176, &(0x7f00000011c0), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, 0x0, &(0x7f0000001280)) 18:29:34 executing program 4: msgsnd(0x0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e25924414548737a705a8"}, 0x79, 0x0) 18:29:34 executing program 3: r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r0, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r0, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r1, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f00000003c0)) r3 = accept4$x25(r2, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000003080)={&(0x7f0000002f80)={0x1d, 0x0, 0x3, {0x0, 0x1, 0x4}, 0x1}, 0x18, &(0x7f0000003040)={&(0x7f0000002fc0)="d5e9363607a3cd8107358a753de20d4cbf2a5a24da2dddde855ad5591801b3f220f45d758e17bdeee065791399b421fe320bd4bd06e93031343cc237f17d58e730a9e10d3825377f8ab678ab5ab7e664a9e7904f1074f9c673f375c8a228ce6560c705e76f577906fe3f8e501a8377e8ff3315ef00995f46fcc6", 0x7a}}, 0x24004800) recvfrom$x25(r3, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r3, &(0x7f000000fdc0)=@xdp, &(0x7f000000fe40)=0x80) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x133, 0xffffffffffffffff, 0x8000000) 18:29:34 executing program 5: socket(0x1a, 0x5, 0x7) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000140)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = msgget$private(0x0, 0x114) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000500)=""/167) 18:29:34 executing program 2: socket(0x1a, 0x5, 0x7) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000140)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="850000004200000001220600070000003f02e06396b406a66acaff3edb21a81a5d2646303f9fb4e318a14753e4dec5d51aac62bfbfaefb901e83de4325a7c22090b4edde2dcf02f4314012c7201558cafe0387f068b8447eab0e30ee0467e274bb8550881bc79b4d07244f94c5b4b9229b4dcfc5361b9cf1920e4530bd12be821806946c4d99eec456c1dad90477225ec3d0e590585dab5d3c7621ab112cb3d8227904a05dccac40fae6a3d6"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0xe4, &(0x7f0000000200)=""/228, 0x41000, 0x5, [], 0x0, 0x0, r0, 0x8, &(0x7f0000000340)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x4, 0x2}, 0x10, 0x2fa02}, 0x78) r1 = msgget$private(0x0, 0x114) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000500)=""/167) 18:29:34 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x3176, &(0x7f00000011c0), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, &(0x7f0000001240)=0x0, &(0x7f0000001280)) syz_io_uring_submit(r2, r1, 0x0, 0x4) 18:29:34 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) msgsnd(0x0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e25924414548737a705a8"}, 0x79, 0x0) 18:29:34 executing program 3: r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r0, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r0, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r1, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f00000003c0)) r3 = accept4$x25(r2, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000003080)={&(0x7f0000002f80)={0x1d, 0x0, 0x3, {0x0, 0x1, 0x4}, 0x1}, 0x18, &(0x7f0000003040)={&(0x7f0000002fc0)="d5e9363607a3cd8107358a753de20d4cbf2a5a24da2dddde855ad5591801b3f220f45d758e17bdeee065791399b421fe320bd4bd06e93031343cc237f17d58e730a9e10d3825377f8ab678ab5ab7e664a9e7904f1074f9c673f375c8a228ce6560c705e76f577906fe3f8e501a8377e8ff3315ef00995f46fcc6", 0x7a}}, 0x24004800) recvfrom$x25(r3, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x133, 0xffffffffffffffff, 0x8000000) 18:29:34 executing program 1: syz_io_uring_setup(0x3176, &(0x7f00000011c0), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, &(0x7f0000001240), 0x0) 18:29:34 executing program 2: socket(0x1a, 0x5, 0x7) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000140)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="850000004200000001220600070000003f02e06396b406a66acaff3edb21a81a5d2646303f9fb4e318a14753e4dec5d51aac62bfbfaefb901e83de4325a7c22090b4edde2dcf02f4314012c7201558cafe0387f068b8447eab0e30ee0467e274bb8550881bc79b4d07244f94c5b4b9229b4dcfc5361b9cf1920e4530bd12be821806946c4d99eec456c1dad90477225ec3d0e590585dab5d3c7621ab112cb3d8227904a05dccac40fae6a3d6"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0xe4, &(0x7f0000000200)=""/228, 0x41000, 0x5, [], 0x0, 0x0, r0, 0x8, &(0x7f0000000340)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x4, 0x2}, 0x10, 0x2fa02}, 0x78) msgget$private(0x0, 0x114) 18:29:34 executing program 5: socket(0x1a, 0x5, 0x7) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000140)) r0 = msgget$private(0x0, 0x114) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000500)=""/167) 18:29:34 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x3176, &(0x7f00000011c0), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, &(0x7f0000001240)=0x0, &(0x7f0000001280)) syz_io_uring_submit(r2, r1, 0x0, 0x4) 18:29:34 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) msgsnd(0x0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e25924414548737a705a8"}, 0x79, 0x0) 18:29:34 executing program 1: syz_io_uring_setup(0x3176, &(0x7f00000011c0), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, &(0x7f0000001240), 0x0) 18:29:34 executing program 3: r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r0, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r0, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r1, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f00000003c0)) accept4$x25(r2, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000003080)={&(0x7f0000002f80)={0x1d, 0x0, 0x3, {0x0, 0x1, 0x4}, 0x1}, 0x18, &(0x7f0000003040)={&(0x7f0000002fc0)="d5e9363607a3cd8107358a753de20d4cbf2a5a24da2dddde855ad5591801b3f220f45d758e17bdeee065791399b421fe320bd4bd06e93031343cc237f17d58e730a9e10d3825377f8ab678ab5ab7e664a9e7904f1074f9c673f375c8a228ce6560c705e76f577906fe3f8e501a8377e8ff3315ef00995f46fcc6", 0x7a}}, 0x24004800) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x133, 0xffffffffffffffff, 0x8000000) 18:29:34 executing program 2: socket(0x1a, 0x5, 0x7) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000140)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="850000004200000001220600070000003f02e06396b406a66acaff3edb21a81a5d2646303f9fb4e318a14753e4dec5d51aac62bfbfaefb901e83de4325a7c22090b4edde2dcf02f4314012c7201558cafe0387f068b8447eab0e30ee0467e274bb8550881bc79b4d07244f94c5b4b9229b4dcfc5361b9cf1920e4530bd12be821806946c4d99eec456c1dad90477225ec3d0e590585dab5d3c7621ab112cb3d8227904a05dccac40fae6a3d6"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0xe4, &(0x7f0000000200)=""/228, 0x41000, 0x5, [], 0x0, 0x0, r0, 0x8, &(0x7f0000000340)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x4, 0x2}, 0x10, 0x2fa02}, 0x78) 18:29:34 executing program 5: socket(0x1a, 0x5, 0x7) r0 = msgget$private(0x0, 0x114) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000500)=""/167) 18:29:34 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x3176, &(0x7f00000011c0), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, &(0x7f0000001240)=0x0, &(0x7f0000001280)) syz_io_uring_submit(r2, r1, &(0x7f0000001a80)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001a40)={&(0x7f00000012c0)=@l2={0x1f, 0x9, @any, 0x63d, 0x2}, 0x80, &(0x7f0000001580)=[{&(0x7f0000001340)='`}', 0x2}, {&(0x7f0000001380)="0575c70458112c65c76dd6122758ccbb79cfb85cac885bae1df00d330d352fcb6eb9cccec626671365587eae14d7b85132f80d69fb59b86d223fa68c2ca5698c3e6cb10f2351719b84aef74c6eb862f7fa2cb4c0c58c0711e2c7b8200e3215b6ea010d898e2e9bb6df164d3d0977768c16ddbdb58c452a3715192f69831bed7347337d08819241cd9494bc0360052b1f99fe681d9a1280dc0fc6af91f835e53d1d6c01e857c00d1b9d66689b18e3207796580c1c2f34965cf83a35bbff92d9af03d6921303ffc8767aafa53834e6ff4ec5f5f0654c00a1f225d0f80c1953d6d7bb8a9084a8a335df5905", 0xea}, {&(0x7f0000001480)="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", 0xfa}], 0x3, &(0x7f00000015c0)=[{0x108, 0x10e, 0x8, "fec6ffa8ef181a58ca6c17e9152f62a19647fb7178d42f92716eca7e19cfa9716ea43490a1cb011a1f1c8a2c525a1e3a19a38e3a2098583fb8dfc398b8833bd7f3a8b8a9ca7b03ffed77cd5657a0a6991858066c75f728a59bb67af5fee93e9410b6e3482478125b297611ec8200634bf9c4ce258922a5fe96b0da3f3f75216f88f0c47b1f3facccd83ed07befc3725db1c4799f15164277df9f9b51d9beee5d98142e9b5d50c2bde0424ec9bde8b3644b307a29e71b357746027f79497f6caf7026d37fe1d0548fcbf8a0dbe875c4fcdb853f7a159d2286554fbc11aa3686c15d606085c7974fdb4c8a60fa373364b49a13a2"}, {0x108, 0x105, 0x5, "12ef3d1da9686fc58698f38e5f21c1a6c665f0b40ce19c0e58b3323bebe4ad41224b91d62da3f4acad8f2f254a1dcd54ace3ac71371bae3f470336011f6b502242bf6a3abb95b30b19a572928eb77f224808e47a288711aece9bfd0cc1fd2c0b2ee3fc253f3771bee5f77daaa3501d98c520cec307fe0170ee55e674153e0784184cf5373715f30c9f7805610039ad5d153315b603678e57076263144f564f5b9d54f0fe900613e7b882f92413af38c887296e8a41d7a54d3b5e3de4c84f8827b0d04bcda94bc7bcbe5919960d713c3e0c7f01c5cd5605f8a0736393d82e9780800021631643d70f78a509d075316c960c"}, {0xf0, 0x6, 0x1, "979e782d23933f4cc7773124abf175c05f12dbf60e00bbc380a4461f7add7f468afc14734f79500b31818b368c6235b85e7e763981ba46db0bda04df2b1bd84ed32988b4b5826ccbf5b648397cabce121522c54ee9f79bba6cb906721e5736c87cfcbb3c07aa7ad07729c926666a23ab125b6dd07a4321b1b045ee7869eb75226aed42378e72f797a0cd71087502ff419062a2526599c672358b64de30e42498f13198ed26bd6ead310a5a0750dbe2a5aef002366c4805fc7c0a105d1db09e08ad22071b39246d8afc1e609688b3f6b5d2888afbca109bcfd5e9"}, {0x60, 0x100, 0x1c83, "7544a46d4ca264541e5bf3deb2e5ddb559ee51f084a86cc60a2a856a0ff6b171da5a7e15b36beba1987f52dc78530e6934e3ada96bae71ef09df7e8b6635d43ba551f9d5ea727e5a2f"}, {0xb8, 0x0, 0x5, "118cdb1e466394043897e11acba2a22ae02bb67bd286068e3c4ec924fbf38bc2b130204034032712036c92600a80f351f9007d79f86f4261abf0138c17dfd0ddfb61514fd1ec35a7fea6a7e7165d5dd41d9eb409427716d1efa8c68ea6d7e7d0a809946d5063d3210d8d212e797d4f31d771bf9ca3bb39397c684f45805bffa5581311d90fb0dcd3fe5cab8076bb62028d08c101bca17243d5de40236ffaea73460b9df2"}, {0x30, 0xff, 0xbfee, "f0031da9c6e574330c5818a07da708829bf9b3b0bbafe3dd42ebf09d11"}], 0x448}, 0x0, 0x4000810, 0x1}, 0x4) 18:29:34 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) msgsnd(0x0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e25924414548737a705a8"}, 0x79, 0x0) 18:29:34 executing program 2: socket(0x1a, 0x5, 0x7) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000140)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 18:29:34 executing program 5: r0 = msgget$private(0x0, 0x114) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000500)=""/167) 18:29:34 executing program 1: syz_io_uring_setup(0x3176, &(0x7f00000011c0), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, &(0x7f0000001240), 0x0) 18:29:34 executing program 3: r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r0, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r0, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r1, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f00000003c0)) accept4$x25(r2, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x133, 0xffffffffffffffff, 0x8000000) 18:29:34 executing program 2: socket(0x1a, 0x5, 0x7) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000140)) 18:29:34 executing program 4: syz_io_uring_setup(0x3f27, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) msgsnd(0x0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e25924414548737a705a8"}, 0x79, 0x0) 18:29:34 executing program 5: r0 = msgget$private(0x0, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000500)=""/167) 18:29:34 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x3176, &(0x7f00000011c0), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, &(0x7f0000001240)=0x0, &(0x7f0000001280)) syz_io_uring_submit(r2, r1, &(0x7f0000001a80)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000810, 0x1}, 0x4) 18:29:34 executing program 1: r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r0, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r0, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r1, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f00000003c0)) r3 = accept4$x25(r2, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000003080)={&(0x7f0000002f80)={0x1d, 0x0, 0x3, {0x0, 0x1, 0x4}, 0x1}, 0x18, &(0x7f0000003040)={&(0x7f0000002fc0)="d5e9363607a3cd8107358a753de20d4cbf2a5a24da2dddde855ad5591801b3f220f45d758e17bdeee065791399b421fe320bd4bd06e93031343cc237f17d58e730a9e10d3825377f8ab678ab5ab7e664a9e7904f1074f9c673f375c8a228ce6560c705e76f577906fe3f8e501a8377e8ff3315ef00995f46fcc6", 0x7a}}, 0x24004800) recvfrom$x25(r3, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r3, &(0x7f000000fdc0)=@xdp, &(0x7f000000fe40)=0x80) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x133, 0xffffffffffffffff, 0x8000000) 18:29:34 executing program 3: r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r0, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r0, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r1, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f00000003c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x133, 0xffffffffffffffff, 0x8000000) 18:29:34 executing program 5: r0 = msgget$private(0x0, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000500)=""/167) 18:29:34 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x3176, &(0x7f00000011c0), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, &(0x7f0000001240)=0x0, &(0x7f0000001280)) syz_io_uring_submit(r2, r1, &(0x7f0000001a80)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4) 18:29:34 executing program 2: socket(0x1a, 0x5, 0x7) 18:29:35 executing program 4: syz_io_uring_setup(0x3f27, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) msgsnd(0x0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e25924414548737a705a8"}, 0x79, 0x0) 18:29:35 executing program 5: r0 = msgget$private(0x0, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000500)=""/167) 18:29:35 executing program 2: socket(0x0, 0x5, 0x7) 18:29:35 executing program 3: r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r0, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r0, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r1, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) syz_init_net_socket$x25(0x9, 0x5, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x133, 0xffffffffffffffff, 0x8000000) 18:29:35 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x3176, &(0x7f00000011c0), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, &(0x7f0000001240)=0x0, &(0x7f0000001280)) syz_io_uring_submit(r2, r1, &(0x7f0000001a80)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x4) 18:29:35 executing program 1: msgsnd(0x0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e25924414548737a705a8"}, 0x79, 0x0) 18:29:35 executing program 5: msgget$private(0x0, 0x114) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000500)=""/167) 18:29:35 executing program 1: msgsnd(0x0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e25924414548737a705a8"}, 0x79, 0x0) 18:29:35 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x3176, &(0x7f00000011c0), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000dd4000/0x2000)=nil, &(0x7f0000001240)=0x0, &(0x7f0000001280)) syz_io_uring_submit(r2, r1, &(0x7f0000001a80)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 18:29:35 executing program 2: socket(0x0, 0x5, 0x7) 18:29:35 executing program 3: r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r0, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r0, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r1, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x133, 0xffffffffffffffff, 0x8000000) 18:29:35 executing program 5: msgget$private(0x0, 0x114) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000500)=""/167) 18:29:35 executing program 4: syz_io_uring_setup(0x3f27, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) msgsnd(0x0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e25924414548737a705a8"}, 0x79, 0x0) 18:29:35 executing program 3: r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r0, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r0, &(0x7f000000fdc0)=@xdp, &(0x7f000000fe40)=0x80) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x133, 0xffffffffffffffff, 0x8000000) 18:29:35 executing program 1: msgsnd(0x0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e25924414548737a705a8"}, 0x79, 0x0) 18:29:35 executing program 2: socket(0x0, 0x5, 0x7) 18:29:35 executing program 5: msgget$private(0x0, 0x114) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000500)=""/167) 18:29:35 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x408c1) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:29:36 executing program 5: r0 = msgget$private(0x0, 0x114) msgctl$MSG_STAT(r0, 0xb, 0x0) 18:29:36 executing program 1: syz_io_uring_setup(0x3f27, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) msgsnd(0x0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e25924414548737a705a8"}, 0x79, 0x0) 18:29:36 executing program 3: r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r0, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x133, 0xffffffffffffffff, 0x8000000) 18:29:36 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x408c1) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:29:36 executing program 2: socket(0x1a, 0x0, 0x7) 18:29:36 executing program 5: r0 = msgget$private(0x0, 0x114) msgctl$MSG_STAT(r0, 0xb, 0x0) 18:29:36 executing program 3: accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x133, 0xffffffffffffffff, 0x8000000) 18:29:36 executing program 1: syz_io_uring_setup(0x3f27, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) msgsnd(0x0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e25924414548737a705a8"}, 0x79, 0x0) 18:29:36 executing program 5: r0 = msgget$private(0x0, 0x114) msgctl$MSG_STAT(r0, 0xb, 0x0) 18:29:36 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) msgsnd(0x0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e25924414548737a705a8"}, 0x79, 0x0) 18:29:36 executing program 2: socket(0x1a, 0x0, 0x0) 18:29:36 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x408c1) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:29:36 executing program 5: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0xf29d, 0xc, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001600), &(0x7f0000000080)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0xb, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x2d0}, [@generic={0x1, 0x4, 0x8, 0x3000, 0x2}, @map={0x18, 0x3, 0x1, 0x0, r1}, @generic={0x5, 0x9, 0x8, 0x3f, 0x1}, @map={0x18, 0xa, 0x1, 0x0, r1}, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x40, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, [], 0x0, 0x1a, r1, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff, r0}, 0x78) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000015c0)={r2, r3}, 0xc) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x13, r1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="181b0000", @ANYRES32, @ANYBLOB="0000000000000000d1850c00ffedffff180000000094000000000000200000000c29f7af91e431c415f0b146ecb35460503030bd1ddb9c6c09b703fc415afd925977a8af2aa074b00dca908b1492e7b76cdd961221d8aecf1d3f5039d6f4edac64d742c0713999646e55fbdb23c3085f92c9e52ddf54d54a75a9a1bd7172cbf3f9f4ff18e09af7b588cd83edbca89b0828035704274cc8be02f40a568fc87b22dd71fffc156164002342634140dda6f31fbe08f808937467cdfbe032d8b59d74ee64b48de83ae59714c22f8bd4faa3fa9ba6a9da37e9fd06fefa58614c45d4ebb966a1f26190ce4e8484a2bfd67ee1696b48ba5fd6b28ad2481f1e7dbbee30f8c87796888736"], &(0x7f0000000140)='syzkaller\x00', 0xfffffc01, 0xd, &(0x7f0000000180)=""/13, 0x40f00, 0x1a, [], 0x0, 0x11, r0, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x9, 0xfff, 0x7}, 0x10, 0xffffffffffffffff, r1}, 0x78) 18:29:36 executing program 2: r0 = syz_io_uring_setup(0x3f28, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xd1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x87e, &(0x7f0000000140)={0x0, 0x8184, 0x6, 0x0, 0xc4, 0x0, r0}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x0) sendmsg$can_j1939(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x1d, 0x0, 0x1, {0x1, 0xf0, 0x2}, 0xfe}, 0x18, &(0x7f0000000300)={&(0x7f0000000200)="1fb646e2470246beead11a78e9e6ca3981e9a3ccbafa3805fedfdc237559793bd0a926ca2e6177fb049231600c2d9eeb557d933da67a4479398d68fb8612d8bd027950094615bb20ffc857cc1f8e79ce5c951c408efe2b32178ecfa7353d0061bcd31d69f8e6f9e50d951574c7d8d441991b242e5415a6fb34eb548d2d592ff7e0a662fe8772c24b88eb3410e9f71b21cfe3ba51a5a6209486378ef699eb989a242fbf5f41684556625d9ce57f105484c7cbb7c3ede0cb8789452254768dc7c65990b527e83784267d767ae34b8418edd646fd749ab5f99c1f87ed927d564f9b26eb71", 0xe3}, 0x1, 0x0, 0x0, 0x10}, 0x840) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x400000) 18:29:37 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x133, 0xffffffffffffffff, 0x8000000) 18:29:37 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x408c1) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) 18:29:37 executing program 1: syz_io_uring_setup(0x3f27, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) msgsnd(0x0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e25924414548737a705a8"}, 0x79, 0x0) 18:29:37 executing program 5: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0xf29d, 0xc, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001600), &(0x7f0000000080)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0xb, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x2d0}, [@generic={0x1, 0x4, 0x8, 0x3000, 0x2}, @map={0x18, 0x3, 0x1, 0x0, r1}, @generic={0x5, 0x9, 0x8, 0x3f, 0x1}, @map={0x18, 0xa, 0x1, 0x0, r1}, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x40, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, [], 0x0, 0x1a, r1, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff, r0}, 0x78) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000015c0)={r2, r3}, 0xc) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x13, r1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="181b0000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0xfffffc01, 0xd, &(0x7f0000000180)=""/13, 0x40f00, 0x1a, [], 0x0, 0x11, r0, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x9, 0xfff, 0x7}, 0x10, 0xffffffffffffffff, r1}, 0x78) 18:29:37 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x408c1) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) 18:29:37 executing program 2: r0 = syz_io_uring_setup(0x3f28, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xd1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x87e, &(0x7f0000000140)={0x0, 0x8184, 0x6, 0x0, 0xc4, 0x0, r0}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x0) sendmsg$can_j1939(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x1d, 0x0, 0x1, {0x1, 0xf0, 0x2}, 0xfe}, 0x18, &(0x7f0000000300)={&(0x7f0000000200)="1fb646e2470246beead11a78e9e6ca3981e9a3ccbafa3805fedfdc237559793bd0a926ca2e6177fb049231600c2d9eeb557d933da67a4479398d68fb8612d8bd027950094615bb20ffc857cc1f8e79ce5c951c408efe2b32178ecfa7353d0061bcd31d69f8e6f9e50d951574c7d8d441991b242e5415a6fb34eb548d2d592ff7e0a662fe8772c24b88eb3410e9f71b21cfe3ba51a5a6209486378ef699eb989a242fbf5f41684556625d9ce57f105484c7cbb7c3ede0cb8789452254768dc7c65990b527e83784267d767ae34b8418edd646fd749ab5f99c1f87ed927d564f9b26eb71", 0xe3}, 0x1, 0x0, 0x0, 0x10}, 0x840) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x400000) 18:29:37 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) msgsnd(0x0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e25924414548737a705a8"}, 0x79, 0x0) 18:29:37 executing program 1: msgsnd(0x0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e25924414548737a705a8"}, 0x79, 0x0) 18:29:37 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x133, 0xffffffffffffffff, 0x8000000) 18:29:37 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) 18:29:37 executing program 5: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0xf29d, 0xc, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001600), &(0x7f0000000080)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0xb, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x2d0}, [@generic={0x1, 0x4, 0x8, 0x3000, 0x2}, @map={0x18, 0x3, 0x1, 0x0, r1}, @generic={0x5, 0x9, 0x8, 0x3f, 0x1}, @map={0x18, 0xa, 0x1, 0x0, r1}, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x40, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, [], 0x0, 0x1a, r1, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff, r0}, 0x78) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000015c0)={r2, r3}, 0xc) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x13, r1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="181b0000", @ANYRES32, @ANYBLOB="0000000000000000d1850c00ffedffff180000000094000000000000200000000c29f7af91e431c415f0b146ecb35460503030bd1ddb9c6c09b703fc415afd925977a8af2aa074b00dca908b1492e7b76cdd961221d8aecf1d3f5039d6f4edac64d742c0713999646e55fbdb23c3085f92c9e52ddf54d54a75a9a1bd7172cbf3f9f4ff18e09af7b588cd83edbca89b0828035704274cc8be02f40a568fc87b22dd71fffc156164002342634140dda6f31fbe08f808937467cdfbe032d8b59d74ee64b48de83ae59714c22f8bd4faa3fa9ba6a9da37e9fd06fefa58614c45d4ebb966a1f26190ce4e8484a2bfd67ee1696b48ba5fd6b28ad2481f1e7dbbee30f8c87796888736"], &(0x7f0000000140)='syzkaller\x00', 0xfffffc01, 0xd, &(0x7f0000000180)=""/13, 0x40f00, 0x1a, [], 0x0, 0x11, r0, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x9, 0xfff, 0x7}, 0x10, 0xffffffffffffffff, r1}, 0x78) 18:29:37 executing program 1: msgsnd(0x0, 0x0, 0x0, 0x0) 18:29:37 executing program 0: sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) 18:29:37 executing program 5: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0xf29d, 0xc, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001600), &(0x7f0000000080)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0xb, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x2d0}, [@generic={0x1, 0x4, 0x8, 0x3000, 0x2}, @map={0x18, 0x3, 0x1, 0x0, r1}, @generic={0x5, 0x9, 0x8, 0x3f, 0x1}, @map={0x18, 0xa, 0x1, 0x0, r1}, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x40, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, [], 0x0, 0x1a, r1, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff, r0}, 0x78) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000015c0)={r2, r3}, 0xc) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x13, r1, 0x1) 18:29:37 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 18:29:37 executing program 2: r0 = syz_io_uring_setup(0x3f28, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xd1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x87e, &(0x7f0000000140)={0x0, 0x8184, 0x6, 0x0, 0xc4, 0x0, r0}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x0) sendmsg$can_j1939(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x1d, 0x0, 0x1, {0x1, 0xf0, 0x2}, 0xfe}, 0x18, &(0x7f0000000300)={&(0x7f0000000200)="1fb646e2470246beead11a78e9e6ca3981e9a3ccbafa3805fedfdc237559793bd0a926ca2e6177fb049231600c2d9eeb557d933da67a4479398d68fb8612d8bd027950094615bb20ffc857cc1f8e79ce5c951c408efe2b32178ecfa7353d0061bcd31d69f8e6f9e50d951574c7d8d441991b242e5415a6fb34eb548d2d592ff7e0a662fe8772c24b88eb3410e9f71b21cfe3ba51a5a6209486378ef699eb989a242fbf5f41684556625d9ce57f105484c7cbb7c3ede0cb8789452254768dc7c65990b527e83784267d767ae34b8418edd646fd749ab5f99c1f87ed927d564f9b26eb71", 0xe3}, 0x1, 0x0, 0x0, 0x10}, 0x840) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x400000) 18:29:37 executing program 0: sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) 18:29:38 executing program 1: msgsnd(0x0, 0x0, 0x0, 0x0) 18:29:38 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) msgsnd(0x0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e25924414548737a705a8"}, 0x79, 0x0) 18:29:38 executing program 5: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0xf29d, 0xc, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001600), &(0x7f0000000080)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0xb, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x2d0}, [@generic={0x1, 0x4, 0x8, 0x3000, 0x2}, @map={0x18, 0x3, 0x1, 0x0, r1}, @generic={0x5, 0x9, 0x8, 0x3f, 0x1}, @map={0x18, 0xa, 0x1, 0x0, r1}, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x40, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, [], 0x0, 0x1a, r1, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff, r0}, 0x78) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000015c0)={r2, r3}, 0xc) 18:29:38 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 18:29:38 executing program 0: sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) 18:29:38 executing program 1: msgsnd(0x0, 0x0, 0x0, 0x0) 18:29:38 executing program 2: r0 = syz_io_uring_setup(0x3f28, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xd1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x87e, &(0x7f0000000140)={0x0, 0x8184, 0x6, 0x0, 0xc4, 0x0, r0}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x0) sendmsg$can_j1939(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x1d, 0x0, 0x1, {0x1, 0xf0, 0x2}, 0xfe}, 0x18, &(0x7f0000000300)={&(0x7f0000000200)="1fb646e2470246beead11a78e9e6ca3981e9a3ccbafa3805fedfdc237559793bd0a926ca2e6177fb049231600c2d9eeb557d933da67a4479398d68fb8612d8bd027950094615bb20ffc857cc1f8e79ce5c951c408efe2b32178ecfa7353d0061bcd31d69f8e6f9e50d951574c7d8d441991b242e5415a6fb34eb548d2d592ff7e0a662fe8772c24b88eb3410e9f71b21cfe3ba51a5a6209486378ef699eb989a242fbf5f41684556625d9ce57f105484c7cbb7c3ede0cb8789452254768dc7c65990b527e83784267d767ae34b8418edd646fd749ab5f99c1f87ed927d564f9b26eb71", 0xe3}, 0x1, 0x0, 0x0, 0x10}, 0x840) 18:29:38 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 18:29:38 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) 18:29:38 executing program 1: msgsnd(0x0, &(0x7f0000000100)={0x0, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e25924414548737a705a8"}, 0x79, 0x0) 18:29:38 executing program 2: r0 = syz_io_uring_setup(0x3f28, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xd1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x87e, &(0x7f0000000140)={0x0, 0x8184, 0x6, 0x0, 0xc4, 0x0, r0}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x0) 18:29:38 executing program 3: msgsnd(0x0, 0x0, 0x0, 0x0) 18:29:38 executing program 5: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0xf29d, 0xc, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001600), &(0x7f0000000080)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0xb, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x2d0}, [@generic={0x1, 0x4, 0x8, 0x3000, 0x2}, @map={0x18, 0x3, 0x1, 0x0, r1}, @generic={0x5, 0x9, 0x8, 0x3f, 0x1}, @map={0x18, 0xa, 0x1, 0x0, r1}, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x40, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, [], 0x0, 0x1a, r1, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff, r0}, 0x78) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 18:29:39 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), 0x0) msgsnd(0x0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e25924414548737a705a8"}, 0x79, 0x0) 18:29:39 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) 18:29:39 executing program 3: msgsnd(0x0, 0x0, 0x0, 0x0) 18:29:39 executing program 2: r0 = syz_io_uring_setup(0x3f28, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xd1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x87e, &(0x7f0000000140)={0x0, 0x8184, 0x6, 0x0, 0xc4, 0x0, r0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 18:29:39 executing program 5: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0xf29d, 0xc, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001600), &(0x7f0000000080)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0xb, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x2d0}, [@generic={0x1, 0x4, 0x8, 0x3000, 0x2}, @map={0x18, 0x3, 0x1, 0x0, r1}, @generic={0x5, 0x9, 0x8, 0x3f, 0x1}, @map={0x18, 0xa, 0x1, 0x0, r1}, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x40, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, [], 0x0, 0x1a, r1, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff, r0}, 0x78) 18:29:39 executing program 1: msgsnd(0x0, &(0x7f0000000100)={0x0, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e25924414548737a705a8"}, 0x79, 0x0) 18:29:39 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) 18:29:39 executing program 1: msgsnd(0x0, &(0x7f0000000100)={0x0, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e25924414548737a705a8"}, 0x79, 0x0) 18:29:39 executing program 3: msgsnd(0x0, 0x0, 0x0, 0x0) 18:29:39 executing program 5: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0xf29d, 0xc, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001600), &(0x7f0000000080)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0xb, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x2d0}, [@generic={0x1, 0x4, 0x8, 0x3000, 0x2}, @map={0x18, 0x3, 0x1, 0x0, r1}, @generic={0x5, 0x9, 0x8, 0x3f, 0x1}, @map={0x18, 0xa, 0x1, 0x0, r1}, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x40, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, [], 0x0, 0x1a, r1, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff, r0}, 0x78) 18:29:39 executing program 2: r0 = syz_io_uring_setup(0x3f28, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xd1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x87e, &(0x7f0000000140)={0x0, 0x8184, 0x6, 0x0, 0xc4, 0x0, r0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:29:39 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, 0x0, 0x4000000) 18:29:40 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), 0x0) msgsnd(0x0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e25924414548737a705a8"}, 0x79, 0x0) 18:29:40 executing program 2: r0 = syz_io_uring_setup(0x3f28, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xd1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x87e, &(0x7f0000000140)={0x0, 0x8184, 0x6, 0x0, 0xc4, 0x0, r0}) 18:29:40 executing program 3: msgsnd(0x0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e25924414548737a705a8"}, 0x79, 0x0) 18:29:40 executing program 5: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0xf29d, 0xc, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001600), &(0x7f0000000080)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0xb, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x2d0}, [@generic={0x1, 0x4, 0x8, 0x3000, 0x2}, @map={0x18, 0x3}, @generic={0x5, 0x9, 0x8, 0x3f, 0x1}, @map={0x18, 0xa}, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x40, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff, r0}, 0x78) 18:29:40 executing program 1: msgsnd(0x0, &(0x7f0000000100)={0x3}, 0x8, 0x0) 18:29:40 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, 0x0, 0x4000000) 18:29:40 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, 0x0, 0x4000000) 18:29:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x44100) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, 0x81, 0x3, 0xd4}) syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:29:40 executing program 2: io_uring_setup(0x87e, &(0x7f0000000140)={0x0, 0x8184, 0x6, 0x0, 0xc4}) 18:29:40 executing program 3: msgsnd(0x0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e25924414548737a705a8"}, 0x79, 0x0) 18:29:40 executing program 5: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0xf29d, 0xc, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001600), &(0x7f0000000080)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0xb, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x2d0}, [@generic={0x1, 0x4, 0x8, 0x3000, 0x2}, @map={0x18, 0x3}, @generic={0x5, 0x9, 0x8, 0x3f, 0x1}, @map={0x18, 0xa}, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x40, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff, r0}, 0x78) 18:29:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x44100) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, 0x81, 0x3, 0xd4}) syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:29:41 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), 0x0) msgsnd(0x0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e25924414548737a705a8"}, 0x79, 0x0) 18:29:41 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) 18:29:41 executing program 5: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0xf29d, 0xc, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001600), &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0xb, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x2d0}, [@generic={0x1, 0x4, 0x8, 0x3000, 0x2}, @map={0x18, 0x3}, @generic={0x5, 0x9, 0x8, 0x3f, 0x1}, @map={0x18, 0xa}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x40, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff}, 0x78) 18:29:41 executing program 2: io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x8184, 0x6, 0x0, 0xc4}) 18:29:41 executing program 3: msgsnd(0x0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e25924414548737a705a8"}, 0x79, 0x0) 18:29:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x44100) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, 0x81, 0x3, 0xd4}) syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:29:41 executing program 3: msgsnd(0x0, 0x0, 0x0, 0x0) 18:29:41 executing program 2: io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x8184, 0x6, 0x0, 0xc4}) 18:29:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x44100) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, 0x81, 0x3, 0xd4}) 18:29:41 executing program 3: msgsnd(0x0, 0x0, 0x0, 0x0) 18:29:41 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0xb, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x2d0}, [@generic={0x1, 0x4, 0x8, 0x3000, 0x2}, @map={0x18, 0x3}, @generic={0x5, 0x9, 0x8, 0x3f, 0x1}, @map={0x18, 0xa}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x40, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff}, 0x78) 18:29:41 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x4000000) 18:29:42 executing program 5: bpf$PROG_LOAD(0x5, 0x0, 0x0) 18:29:42 executing program 2: io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x8184, 0x6, 0x0, 0xc4}) 18:29:42 executing program 1: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x44100) 18:29:42 executing program 3: msgsnd(0x0, 0x0, 0x0, 0x0) 18:29:42 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) msgsnd(0x0, 0x0, 0x0, 0x0) 18:29:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x4000000) 18:29:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x4000000) 18:29:42 executing program 2: io_uring_setup(0x87e, 0x0) 18:29:42 executing program 5: bpf$PROG_LOAD(0x5, 0x0, 0x0) 18:29:42 executing program 3: msgsnd(0x0, &(0x7f0000000100)={0x0, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e25924414548737a705a8"}, 0x79, 0x0) 18:29:42 executing program 1: syz_open_dev$dri(0x0, 0x0, 0x44100) 18:29:42 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) msgsnd(0x0, 0x0, 0x0, 0x0) 18:29:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) 18:29:42 executing program 5: bpf$PROG_LOAD(0x5, 0x0, 0x0) 18:29:42 executing program 2: io_uring_setup(0x87e, 0x0) 18:29:42 executing program 3: msgsnd(0x0, &(0x7f0000000100)={0x0, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e25924414548737a705a8"}, 0x79, 0x0) 18:29:42 executing program 1: syz_open_dev$dri(0x0, 0x0, 0x44100) 18:29:42 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) msgsnd(0x0, 0x0, 0x0, 0x0) 18:29:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) 18:29:42 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x0, 0xb, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x2d0}, [@generic={0x1, 0x4, 0x8, 0x3000, 0x2}, @map={0x18, 0x3}, @generic={0x5, 0x9, 0x8, 0x3f, 0x1}, @map={0x18, 0xa}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x40, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff}, 0x78) 18:29:42 executing program 2: io_uring_setup(0x87e, 0x0) 18:29:42 executing program 3: msgsnd(0x0, &(0x7f0000000100)={0x0, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e25924414548737a705a8"}, 0x79, 0x0) 18:29:42 executing program 1: syz_open_dev$dri(0x0, 0x0, 0x44100) 18:29:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) 18:29:42 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) msgsnd(0x0, &(0x7f0000000100)={0x0, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e25924414548737a705a8"}, 0x79, 0x0) 18:29:42 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x0, 0xb, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x2d0}, [@generic={0x1, 0x4, 0x8, 0x3000, 0x2}, @map={0x18, 0x3}, @generic={0x5, 0x9, 0x8, 0x3f, 0x1}, @map={0x18, 0xa}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x40, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff}, 0x78) 18:29:43 executing program 2: io_uring_setup(0x87e, &(0x7f0000000140)={0x0, 0x0, 0x6, 0x0, 0xc4}) 18:29:43 executing program 3: msgsnd(0x0, &(0x7f0000000100)={0x3}, 0x8, 0x0) 18:29:43 executing program 1: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) 18:29:43 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) msgsnd(0x0, &(0x7f0000000100)={0x0, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e25924414548737a705a8"}, 0x79, 0x0) 18:29:43 executing program 2: io_uring_setup(0x87e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xc4}) 18:29:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) 18:29:43 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x0, 0xb, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x2d0}, [@generic={0x1, 0x4, 0x8, 0x3000, 0x2}, @map={0x18, 0x3}, @generic={0x5, 0x9, 0x8, 0x3f, 0x1}, @map={0x18, 0xa}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x40, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff}, 0x78) 18:29:43 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x0, 0xb, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x2d0}, [@generic={0x1, 0x4, 0x8, 0x3000, 0x2}, @map={0x18, 0x3}, @generic={0x5, 0x9, 0x8, 0x3f, 0x1}, @map={0x18, 0xa}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x40, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff}, 0x78) 18:29:43 executing program 2: io_uring_setup(0x87e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xc4}) 18:29:43 executing program 1: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) 18:29:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) 18:29:43 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) msgsnd(0x0, &(0x7f0000000100)={0x0, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e25924414548737a705a8"}, 0x79, 0x0) 18:29:43 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x40, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff}, 0x78) 18:29:43 executing program 2: io_uring_setup(0x87e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xc4}) 18:29:43 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x0, 0xb, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x2d0}, [@generic={0x1, 0x4, 0x8, 0x3000, 0x2}, @map={0x18, 0x3}, @generic={0x5, 0x9, 0x8, 0x3f, 0x1}, @map={0x18, 0xa}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x40, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff}, 0x78) 18:29:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) 18:29:43 executing program 1: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) 18:29:43 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x40, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff}, 0x78) 18:29:43 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) msgsnd(0x0, &(0x7f0000000100)={0x3}, 0x8, 0x0) 18:29:43 executing program 2: io_uring_setup(0x87e, &(0x7f0000000140)={0x0, 0x0, 0x6}) 18:29:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x4, 0x0, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) 18:29:43 executing program 1: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) 18:29:43 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x0, 0xb, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x2d0}, [@generic={0x1, 0x4, 0x8, 0x3000, 0x2}, @map={0x18, 0x3}, @generic={0x5, 0x9, 0x8, 0x3f, 0x1}, @map={0x18, 0xa}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x40, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff}, 0x78) 18:29:43 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x40, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff}, 0x78) 18:29:43 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) msgsnd(0x0, &(0x7f0000000100)={0x3}, 0x8, 0x0) 18:29:43 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x2, 0x2, {0x2, 0xf0, 0x2}, {0x1, 0xff, 0x7}, 0xfd, 0xfb}, {0x1, 0x2, {0x2, 0x0, 0x1}, {0x2, 0x1, 0x2}, 0x0, 0x1}], 0x60) 18:29:43 executing program 1: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) 18:29:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x4, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) 18:29:43 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0xb, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d0}, [@generic={0x1, 0x4, 0x8, 0x3000, 0x2}, @map={0x18, 0x3}, @generic={0x5, 0x9, 0x8, 0x3f, 0x1}, @map={0x18, 0xa}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x40, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff}, 0x78) 18:29:43 executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) 18:29:43 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) msgsnd(0x0, &(0x7f0000000100)={0x3}, 0x8, 0x0) 18:29:43 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x2, 0x2, {0x2, 0xf0, 0x2}, {0x1, 0xff, 0x7}, 0xfd, 0xfb}, {0x1, 0x2, {0x2, 0x0, 0x1}, {0x2, 0x1, 0x2}, 0x0, 0x1}], 0x60) 18:29:43 executing program 1: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) 18:29:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x4, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) 18:29:43 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0xb, &(0x7f0000000400)=@framed={{}, [@generic={0x1, 0x4, 0x8, 0x3000, 0x2}, @map={0x18, 0x3}, @generic={0x5, 0x9, 0x8, 0x3f, 0x1}, @map={0x18, 0xa}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x40, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff}, 0x78) 18:29:43 executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) 18:29:43 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) msgsnd(0x0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f8"}, 0x41, 0x0) 18:29:43 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x2, 0x2, {0x2, 0xf0, 0x2}, {0x1, 0xff, 0x7}, 0xfd, 0xfb}, {0x1, 0x2, {0x2, 0x0, 0x1}, {0x2, 0x1, 0x2}, 0x0, 0x1}], 0x60) 18:29:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x4, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) 18:29:43 executing program 1: syz_open_dev$dri(0x0, 0x0, 0x0) 18:29:43 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x9, &(0x7f0000000400)=@framed={{}, [@generic={0x1, 0x4, 0x8, 0x3000, 0x2}, @map={0x18, 0x3}, @generic={0x5, 0x9, 0x8, 0x3f, 0x1}, @map={0x18, 0xa}]}, &(0x7f0000000100)='GPL\x00', 0x40, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff}, 0x78) 18:29:43 executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) 18:29:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x4, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) 18:29:44 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x2, 0x2, {0x2, 0xf0, 0x2}, {0x1, 0xff, 0x7}, 0xfd, 0xfb}, {0x1, 0x2, {0x2, 0x0, 0x1}, {0x2, 0x1, 0x2}, 0x0, 0x1}], 0x60) 18:29:44 executing program 1: syz_open_dev$dri(0x0, 0x0, 0x0) 18:29:44 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x7, &(0x7f0000000400)=@framed={{}, [@generic={0x1, 0x4, 0x8, 0x3000, 0x2}, @map={0x18, 0x3}, @generic={0x5, 0x9, 0x8, 0x3f, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x40, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff}, 0x78) 18:29:44 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x40, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff}, 0x78) 18:29:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) 18:29:44 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x6, &(0x7f0000000400)=@framed={{}, [@generic={0x1, 0x4, 0x8, 0x3000, 0x2}, @map={0x18, 0x3}]}, &(0x7f0000000100)='GPL\x00', 0x40, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff}, 0x78) 18:29:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x4}, 0x14}}, 0x4000000) 18:29:44 executing program 1: syz_open_dev$dri(0x0, 0x0, 0x0) 18:29:44 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x2, 0x2, {0x2, 0xf0, 0x2}, {0x1, 0xff, 0x7}, 0xfd, 0xfb}, {0x1, 0x2, {0x2, 0x0, 0x1}, {0x2, 0x1, 0x2}, 0x0, 0x1}], 0x60) 18:29:44 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x40, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff}, 0x78) 18:29:44 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) msgsnd(0x0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f8"}, 0x41, 0x0) 18:29:44 executing program 1: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) read$FUSE(r0, &(0x7f00000001c0)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r0, &(0x7f0000002200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getresuid(&(0x7f0000004240), &(0x7f0000004280), &(0x7f00000042c0)=0x0) ioctl$SIOCX25SCAUSEDIAG(0xffffffffffffffff, 0x89ec, &(0x7f0000004300)={0x7, 0x7}) read$FUSE(r1, &(0x7f0000004480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = getegid() write$FUSE_DIRENTPLUS(r0, &(0x7f0000006a00)=ANY=[@ANYBLOB="d004000000000000", @ANYRES64=r2, @ANYBLOB="04000000000000000100000000000000f8ffffffffffffff0600000000000000000400008100000004000000000000000400000000000000ed7e0000000000000002000000000000390000000000000001000080000000000100000038000000040000000060000007000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="06000000ff7f000000000000020000000000000000000000000000001f000000040000002f7379732f6b65726e656c2f64656275672f62696e6465722f73746174730000030000000000000001000000000000001f00000000000000010000000000000005000000a40b000005000000000000000000000000000000b1524f46000000000080000000000000ffffff7f0000000008000000000000000400000040090000010001000040000003000000", @ANYRES32=0xee01, @ANYRES32=r3, @ANYBLOB="0300000001040000000000000500000000000000c0ffffffffffffff1f000000000400002f7379732f6b65726e656c2f64656275672f62696e6465722f73746174730000060000000000000000000000000000000010000000000000fbffffffffffffff030000000000000000000000000000000800000000000000060000000000000002000000000000000700000000000000050000000000000000000000090000000600000000a0000006000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="ff0700000400000000000000010000000000000022e700000000000009000000090000005e2a7b2a2e5e402c3a000000000000000600000000000000020000000000000009000000000000000000008000000000ff03000009000000040000000000000001000000000000000700000000000000000000000080000000020000000000000008000000000000d1200000bff9ffffb95600000020000019000000", @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="060000003f0000000000000000000000000000000200000000000000010000000300000021000000000000000600000000000000010000000000000000000100000000000300000000000000a600000001000000040000000000000000000000000000000900000000000000040000000000000006000000000000000500000000000000400a0000030000000800000000c0000000800000", @ANYRES32=0xee01, @ANYRES32=r5, @ANYBLOB="0000000006000000000000000300000000000000000000000000000029000000000000002f7379732f6b65726e656c2f64656275672f62696e6465722f7472616e73616374696f6e5f6c6f6700000000000000000200000000000000000000000000000040000000000000000300000000000000ea00000080ffffff00000000000000003f0000000000000003000000000000000300000000000000010000800000000006000000000000000200000001000000160200000080000005000000", @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=0xee01, @ANYRES32=r6, @ANYBLOB="7f000000010000000000000005000000000000000700000000000000040000007f0000002d23273200000000"], 0x4d0) mount_setattr(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x100, &(0x7f0000000140)={0x100080, 0x81, 0x40000, {r0}}, 0x20) 18:29:44 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x40, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff}, 0x78) 18:29:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 18:29:44 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x4, &(0x7f0000000400)=@framed={{}, [@generic={0x1, 0x4, 0x8, 0x3000, 0x2}]}, &(0x7f0000000100)='GPL\x00', 0x40, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff}, 0x78) 18:29:44 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x2, 0x2, {0x2, 0xf0, 0x2}, {0x1, 0xff, 0x7}, 0xfd, 0xfb}, {0x1, 0x2, {0x2, 0x0, 0x1}, {0x2, 0x1, 0x2}, 0x0, 0x1}], 0x60) 18:29:45 executing program 1: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) read$FUSE(r0, &(0x7f00000001c0)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r0, &(0x7f0000002200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getresuid(&(0x7f0000004240), &(0x7f0000004280), &(0x7f00000042c0)=0x0) ioctl$SIOCX25SCAUSEDIAG(0xffffffffffffffff, 0x89ec, &(0x7f0000004300)={0x7, 0x7}) read$FUSE(r1, &(0x7f0000004480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = getegid() write$FUSE_DIRENTPLUS(r0, &(0x7f0000006a00)=ANY=[@ANYBLOB="d004000000000000", @ANYRES64=r2, @ANYBLOB="04000000000000000100000000000000f8ffffffffffffff0600000000000000000400008100000004000000000000000400000000000000ed7e0000000000000002000000000000390000000000000001000080000000000100000038000000040000000060000007000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="06000000ff7f000000000000020000000000000000000000000000001f000000040000002f7379732f6b65726e656c2f64656275672f62696e6465722f73746174730000030000000000000001000000000000001f00000000000000010000000000000005000000a40b000005000000000000000000000000000000b1524f46000000000080000000000000ffffff7f0000000008000000000000000400000040090000010001000040000003000000", @ANYRES32=0xee01, @ANYRES32=r3, @ANYBLOB="0300000001040000000000000500000000000000c0ffffffffffffff1f000000000400002f7379732f6b65726e656c2f64656275672f62696e6465722f73746174730000060000000000000000000000000000000010000000000000fbffffffffffffff030000000000000000000000000000000800000000000000060000000000000002000000000000000700000000000000050000000000000000000000090000000600000000a0000006000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="ff0700000400000000000000010000000000000022e700000000000009000000090000005e2a7b2a2e5e402c3a000000000000000600000000000000020000000000000009000000000000000000008000000000ff03000009000000040000000000000001000000000000000700000000000000000000000080000000020000000000000008000000000000d1200000bff9ffffb95600000020000019000000", @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="060000003f0000000000000000000000000000000200000000000000010000000300000021000000000000000600000000000000010000000000000000000100000000000300000000000000a600000001000000040000000000000000000000000000000900000000000000040000000000000006000000000000000500000000000000400a0000030000000800000000c0000000800000", @ANYRES32=0xee01, @ANYRES32=r5, @ANYBLOB="0000000006000000000000000300000000000000000000000000000029000000000000002f7379732f6b65726e656c2f64656275672f62696e6465722f7472616e73616374696f6e5f6c6f6700000000000000000200000000000000000000000000000040000000000000000300000000000000ea00000080ffffff00000000000000003f0000000000000003000000000000000300000000000000010000800000000006000000000000000200000001000000160200000080000005000000", @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=0xee01, @ANYRES32=r6, @ANYBLOB="7f000000010000000000000005000000000000000700000000000000040000007f0000002d23273200000000"], 0x4d0) mount_setattr(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x100, &(0x7f0000000140)={0x100080, 0x81, 0x40000, {r0}}, 0x20) 18:29:45 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x600041) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000140)={{0x1, 0x1, 0x7fff}, 0x800, 0x0, 'id0\x00', 'timer1\x00', 0x0, 0x10000, 0x7, 0x3, 0x73000000}) connect$x25(0xffffffffffffffff, &(0x7f0000000100)={0x9, @remote={[], 0x3}}, 0x12) socket(0xa, 0x1, 0x7f) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000000)={0x5, 0x6, 0x35c, 0xfffff93d, 'syz0\x00', 0xfffffff8}) 18:29:45 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) msgsnd(0x0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f8"}, 0x41, 0x0) 18:29:45 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000100)='GPL\x00', 0x40, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff}, 0x78) 18:29:45 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x0, 0xb, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d0}, [@generic={0x1, 0x4, 0x8, 0x3000, 0x2}, @map={0x18, 0x3}, @generic={0x5, 0x9, 0x8, 0x3f, 0x1}, @map={0x18, 0xa}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x40, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff}, 0x78) 18:29:45 executing program 1: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) read$FUSE(r0, &(0x7f00000001c0)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r0, &(0x7f0000002200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getresuid(&(0x7f0000004240), &(0x7f0000004280), &(0x7f00000042c0)=0x0) ioctl$SIOCX25SCAUSEDIAG(0xffffffffffffffff, 0x89ec, &(0x7f0000004300)={0x7, 0x7}) read$FUSE(r1, &(0x7f0000004480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = getegid() write$FUSE_DIRENTPLUS(r0, &(0x7f0000006a00)=ANY=[@ANYBLOB="d004000000000000", @ANYRES64=r2, @ANYBLOB="04000000000000000100000000000000f8ffffffffffffff0600000000000000000400008100000004000000000000000400000000000000ed7e0000000000000002000000000000390000000000000001000080000000000100000038000000040000000060000007000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="06000000ff7f000000000000020000000000000000000000000000001f000000040000002f7379732f6b65726e656c2f64656275672f62696e6465722f73746174730000030000000000000001000000000000001f00000000000000010000000000000005000000a40b000005000000000000000000000000000000b1524f46000000000080000000000000ffffff7f0000000008000000000000000400000040090000010001000040000003000000", @ANYRES32=0xee01, @ANYRES32=r3, @ANYBLOB="0300000001040000000000000500000000000000c0ffffffffffffff1f000000000400002f7379732f6b65726e656c2f64656275672f62696e6465722f73746174730000060000000000000000000000000000000010000000000000fbffffffffffffff030000000000000000000000000000000800000000000000060000000000000002000000000000000700000000000000050000000000000000000000090000000600000000a0000006000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="ff0700000400000000000000010000000000000022e700000000000009000000090000005e2a7b2a2e5e402c3a000000000000000600000000000000020000000000000009000000000000000000008000000000ff03000009000000040000000000000001000000000000000700000000000000000000000080000000020000000000000008000000000000d1200000bff9ffffb95600000020000019000000", @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="060000003f0000000000000000000000000000000200000000000000010000000300000021000000000000000600000000000000010000000000000000000100000000000300000000000000a600000001000000040000000000000000000000000000000900000000000000040000000000000006000000000000000500000000000000400a0000030000000800000000c0000000800000", @ANYRES32=0xee01, @ANYRES32=r5, @ANYBLOB="0000000006000000000000000300000000000000000000000000000029000000000000002f7379732f6b65726e656c2f64656275672f62696e6465722f7472616e73616374696f6e5f6c6f6700000000000000000200000000000000000000000000000040000000000000000300000000000000ea00000080ffffff00000000000000003f0000000000000003000000000000000300000000000000010000800000000006000000000000000200000001000000160200000080000005000000", @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="080000000100ffff000000000600000000000000060000000000000002000000050000002d0000000000000004000000000000000300000000000000060000000000000005000000000000000700000000001c000000000000000001f0ffffffffffffc00000000000000001000000000000005b00000000000000020000000000000009000000001000007fffffff000000000000000000d7031c34f76e793f83cff85d09fbae743b4c31f0b48d6ebcf5b5cfef1887cc456b4f4888d62007b4847c534c886450cb4eb7d4abdadb3118a3407a24dafba1b4078b1a7083b0799b5243e0a15cb27936553a5ca45d7eff013901ded0eae473ef37a4002cd7dbd949fd10be41fda5492a", @ANYRES32=0xee01, @ANYRES32=r6, @ANYBLOB="7f000000010000000000000005000000000000000700000000000000040000007f0000002d23273200000000"], 0x4d0) mount_setattr(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x100, &(0x7f0000000140)={0x100080, 0x81, 0x40000, {r0}}, 0x20) 18:29:45 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x2, 0x2, {0x2, 0xf0, 0x2}, {0x1, 0xff, 0x7}, 0xfd, 0xfb}, {0x1, 0x2, {0x2, 0x0, 0x1}, {0x2, 0x1, 0x2}, 0x0, 0x1}], 0x60) 18:29:45 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x600041) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000140)={{0x1, 0x1, 0x7fff}, 0x800, 0x0, 'id0\x00', 'timer1\x00', 0x0, 0x10000, 0x7, 0x3, 0x73000000}) connect$x25(0xffffffffffffffff, &(0x7f0000000100)={0x9, @remote={[], 0x3}}, 0x12) socket(0xa, 0x1, 0x7f) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000000)={0x5, 0x6, 0x35c, 0xfffff93d, 'syz0\x00', 0xfffffff8}) 18:29:45 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x3, &(0x7f0000000400)=@framed, 0x0, 0x40, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff}, 0x78) 18:29:45 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x2, 0x2, {0x2, 0xf0, 0x2}, {0x1, 0xff, 0x7}, 0xfd, 0xfb}, {0x1, 0x2, {0x2, 0x0, 0x1}, {0x2, 0x1, 0x2}, 0x0, 0x1}], 0x60) 18:29:45 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x0, 0xb, &(0x7f0000000400)=@framed={{}, [@generic={0x1, 0x4, 0x8, 0x3000, 0x2}, @map={0x18, 0x3}, @generic={0x5, 0x9, 0x8, 0x3f, 0x1}, @map={0x18, 0xa}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x40, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff}, 0x78) 18:29:45 executing program 1: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002200)={0x2020}, 0x2020) getresuid(&(0x7f0000004240), &(0x7f0000004280), &(0x7f00000042c0)) ioctl$SIOCX25SCAUSEDIAG(0xffffffffffffffff, 0x89ec, &(0x7f0000004300)={0x7, 0x7}) read$FUSE(r1, &(0x7f0000004480)={0x2020}, 0x2020) getegid() mount_setattr(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x100, &(0x7f0000000140)={0x100080, 0x81, 0x40000, {r0}}, 0x20) 18:29:45 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x600041) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000140)={{0x1, 0x1, 0x7fff}, 0x800, 0x0, 'id0\x00', 'timer1\x00', 0x0, 0x10000, 0x7, 0x3, 0x73000000}) connect$x25(0xffffffffffffffff, &(0x7f0000000100)={0x9, @remote={[], 0x3}}, 0x12) socket(0xa, 0x1, 0x7f) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000000)={0x5, 0x6, 0x35c, 0xfffff93d, 'syz0\x00', 0xfffffff8}) 18:29:45 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x3, &(0x7f0000000400)=@framed, 0x0, 0x40, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff}, 0x78) 18:29:46 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) msgsnd(0x0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba2"}, 0x5d, 0x0) 18:29:46 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x2, 0x2, {0x2, 0xf0, 0x2}, {0x1, 0xff, 0x7}, 0xfd, 0xfb}, {0x1, 0x2, {0x2, 0x0, 0x1}, {0x2, 0x1, 0x2}, 0x0, 0x1}], 0x60) 18:29:46 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x0, 0x9, &(0x7f0000000400)=@framed={{}, [@generic={0x1, 0x4, 0x8, 0x3000, 0x2}, @map={0x18, 0x3}, @generic={0x5, 0x9, 0x8, 0x3f, 0x1}, @map={0x18, 0xa}]}, &(0x7f0000000100)='GPL\x00', 0x40, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff}, 0x78) 18:29:46 executing program 1: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002200)={0x2020}, 0x2020) getresuid(&(0x7f0000004240), &(0x7f0000004280), &(0x7f00000042c0)) ioctl$SIOCX25SCAUSEDIAG(0xffffffffffffffff, 0x89ec, &(0x7f0000004300)={0x7, 0x7}) read$FUSE(r1, &(0x7f0000004480)={0x2020}, 0x2020) mount_setattr(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x100, &(0x7f0000000140)={0x100080, 0x81, 0x40000, {r0}}, 0x20) 18:29:46 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x3, &(0x7f0000000400)=@framed, 0x0, 0x40, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff}, 0x78) 18:29:46 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x600041) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000140)={{0x1, 0x1, 0x7fff}, 0x800, 0x0, 'id0\x00', 'timer1\x00', 0x0, 0x10000, 0x7, 0x3, 0x73000000}) connect$x25(0xffffffffffffffff, &(0x7f0000000100)={0x9, @remote={[], 0x3}}, 0x12) socket(0xa, 0x1, 0x7f) 18:29:46 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff}, 0x78) 18:29:46 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x0, 0x7, &(0x7f0000000400)=@framed={{}, [@generic={0x1, 0x4, 0x8, 0x3000, 0x2}, @map={0x18, 0x3}, @generic={0x5, 0x9, 0x8, 0x3f, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x40, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff}, 0x78) 18:29:46 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x2, 0x2, {0x2, 0xf0, 0x2}, {0x1, 0xff, 0x7}, 0xfd, 0xfb}, {0x1, 0x2, {0x2, 0x0, 0x1}, {0x2, 0x1, 0x2}, 0x0, 0x1}], 0x60) 18:29:46 executing program 1: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002200)={0x2020}, 0x2020) getresuid(&(0x7f0000004240), &(0x7f0000004280), &(0x7f00000042c0)) ioctl$SIOCX25SCAUSEDIAG(0xffffffffffffffff, 0x89ec, &(0x7f0000004300)={0x7, 0x7}) mount_setattr(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x100, &(0x7f0000000140)={0x100080, 0x81, 0x40000, {r0}}, 0x20) 18:29:46 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x600041) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000140)={{0x1, 0x1, 0x7fff}, 0x800, 0x0, 'id0\x00', 'timer1\x00', 0x0, 0x10000, 0x7, 0x3, 0x73000000}) socket(0xa, 0x1, 0x7f) 18:29:46 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x0, 0x6, &(0x7f0000000400)=@framed={{}, [@generic={0x1, 0x4, 0x8, 0x3000, 0x2}, @map={0x18, 0x3}]}, &(0x7f0000000100)='GPL\x00', 0x40, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff}, 0x78) 18:29:47 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, 0x0, 0x0) 18:29:47 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) msgsnd(0x0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba2"}, 0x5d, 0x0) 18:29:47 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff}, 0x78) 18:29:47 executing program 1: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002200)={0x2020}, 0x2020) getresuid(&(0x7f0000004240), &(0x7f0000004280), &(0x7f00000042c0)) mount_setattr(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x100, &(0x7f0000000140)={0x100080, 0x81, 0x40000, {r0}}, 0x20) 18:29:47 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x0, 0x4, &(0x7f0000000400)=@framed={{}, [@generic={0x1, 0x4, 0x8, 0x3000, 0x2}]}, &(0x7f0000000100)='GPL\x00', 0x40, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff}, 0x78) 18:29:47 executing program 0: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x600041) socket(0xa, 0x1, 0x7f) 18:29:47 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, 0x0, 0x0) 18:29:47 executing program 0: socket(0xa, 0x1, 0x7f) 18:29:47 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff}, 0x78) 18:29:47 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x0, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000100)='GPL\x00', 0x40, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff}, 0x78) 18:29:47 executing program 1: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002200)={0x2020}, 0x2020) mount_setattr(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x100, &(0x7f0000000140)={0x100080, 0x81, 0x40000, {r0}}, 0x20) 18:29:47 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x0, 0x3, &(0x7f0000000400)=@framed, 0x0, 0x40, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff}, 0x78) 18:29:47 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, 0x0, 0x0) 18:29:48 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) msgsnd(0x0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba2"}, 0x5d, 0x0) 18:29:48 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff}, 0x78) 18:29:48 executing program 0: socket(0x0, 0x1, 0x7f) 18:29:48 executing program 1: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020) mount_setattr(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x100, &(0x7f0000000140)={0x100080, 0x81, 0x40000, {r0}}, 0x20) 18:29:48 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x2, 0x2, {0x2, 0xf0, 0x2}, {0x1, 0xff, 0x7}, 0xfd, 0xfb}], 0x40) 18:29:48 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x0, 0x3, &(0x7f0000000400)=@framed, 0x0, 0x40, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff}, 0x78) 18:29:48 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x2, 0x2, {0x2, 0xf0, 0x2}, {0x1, 0xff, 0x7}, 0xfd, 0xfb}], 0x40) 18:29:48 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x0, 0x3, &(0x7f0000000400)=@framed, 0x0, 0x40, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff}, 0x78) 18:29:48 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff}, 0x78) 18:29:48 executing program 0: socket(0x0, 0x1, 0x7f) 18:29:48 executing program 1: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) mount_setattr(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x100, &(0x7f0000000140)={0x100080, 0x81, 0x40000, {r0}}, 0x20) 18:29:48 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff}, 0x78) 18:29:49 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) msgsnd(0x0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93"}, 0x6b, 0x0) 18:29:49 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x2, 0x2, {0x2, 0xf0, 0x2}, {0x1, 0xff, 0x7}, 0xfd, 0xfb}], 0x40) 18:29:49 executing program 0: socket(0x0, 0x1, 0x7f) 18:29:49 executing program 1: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x100, &(0x7f0000000140)={0x100080, 0x81, 0x40000, {r0}}, 0x20) 18:29:49 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x0, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x8, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff}, 0x78) 18:29:49 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 18:29:49 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x2, 0x2, {0x2, 0xf0, 0x2}, {0x1, 0xff, 0x7}, 0xfd, 0xfb}, {0x0, 0x2, {0x2, 0x0, 0x1}, {0x2, 0x1, 0x2}, 0x0, 0x1}], 0x60) 18:29:49 executing program 0: socket(0xa, 0x0, 0x7f) 18:29:49 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x0, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff}, 0x78) 18:29:49 executing program 1: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x100, &(0x7f0000000140)={0x100080, 0x81, 0x40000, {r0}}, 0x20) 18:29:49 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x2, 0x2, {0x2, 0xf0, 0x2}, {0x1, 0xff, 0x7}, 0xfd, 0xfb}], 0x40) 18:29:49 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x2, 0x2, {0x2, 0xf0, 0x2}, {0x1, 0xff, 0x7}, 0xfd, 0xfb}, {0x0, 0x0, {0x2, 0x0, 0x1}, {0x2, 0x1, 0x2}, 0x0, 0x1}], 0x60) 18:29:50 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) msgsnd(0x0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93"}, 0x6b, 0x0) 18:29:50 executing program 0: socket(0xa, 0x0, 0x7f) 18:29:50 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x0, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff}, 0x78) 18:29:50 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x2, 0x2, {0x2, 0xf0, 0x2}, {0x1, 0xff, 0x7}, 0xfd, 0xfb}], 0x40) 18:29:50 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x2, 0x2, {0x2, 0xf0, 0x2}, {0x1, 0xff, 0x7}, 0xfd, 0xfb}, {0x0, 0x0, {0x0, 0x0, 0x1}, {0x2, 0x1, 0x2}, 0x0, 0x1}], 0x60) 18:29:50 executing program 1: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x100, &(0x7f0000000140)={0x100080, 0x81, 0x40000, {r0}}, 0x20) 18:29:50 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x0, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff}, 0x78) 18:29:50 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x2, 0x2, {0x2, 0xf0, 0x2}, {0x1, 0xff, 0x7}, 0xfd, 0xfb}], 0x40) 18:29:50 executing program 1: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mount_setattr(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x100, &(0x7f0000000140)={0x100080, 0x81, 0x40000}, 0x20) 18:29:50 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x2, 0x2, {0x2, 0xf0, 0x2}, {0x1, 0xff, 0x7}, 0xfd, 0xfb}, {0x0, 0x0, {}, {0x2, 0x1, 0x2}, 0x0, 0x1}], 0x60) 18:29:50 executing program 0: socket(0xa, 0x0, 0x7f) 18:29:50 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x0, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff}, 0x78) 18:29:51 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) msgsnd(0x0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93"}, 0x6b, 0x0) 18:29:51 executing program 5: setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x2, 0x2, {0x2, 0xf0, 0x2}, {0x1, 0xff, 0x7}, 0xfd, 0xfb}], 0x40) 18:29:51 executing program 1: mount_setattr(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x100, &(0x7f0000000140)={0x100080, 0x81, 0x40000}, 0x20) 18:29:51 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x2, 0x2, {0x2, 0xf0, 0x2}, {0x1, 0xff, 0x7}, 0xfd, 0xfb}, {0x0, 0x0, {}, {0x0, 0x1, 0x2}, 0x0, 0x1}], 0x60) 18:29:51 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x0, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000014c0)={0x2, 0x7, 0x5, 0xfffffcb7}, 0x10, 0xffffffffffffffff}, 0x78) 18:29:51 executing program 0: socket(0xa, 0x1, 0x0) 18:29:51 executing program 0: socket(0xa, 0x1, 0x0) 18:29:51 executing program 5: setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x2, 0x2, {0x2, 0xf0, 0x2}, {0x1, 0xff, 0x7}, 0xfd, 0xfb}], 0x40) 18:29:51 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x0, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 18:29:51 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x2, 0x2, {0x2, 0xf0, 0x2}, {0x1, 0xff, 0x7}, 0xfd, 0xfb}, {0x0, 0x0, {}, {0x0, 0x0, 0x2}, 0x0, 0x1}], 0x60) 18:29:51 executing program 1: mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000000140)={0x100080, 0x81, 0x40000}, 0x20) 18:29:51 executing program 0: socket(0xa, 0x1, 0x0) 18:29:52 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) msgsnd(0x0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e259244"}, 0x72, 0x0) 18:29:52 executing program 5: setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x2, 0x2, {0x2, 0xf0, 0x2}, {0x1, 0xff, 0x7}, 0xfd, 0xfb}], 0x40) 18:29:52 executing program 3: socket(0xa, 0x1, 0x0) 18:29:52 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x2, 0x2, {0x2, 0xf0, 0x2}, {0x1, 0xff, 0x7}, 0xfd, 0xfb}, {0x0, 0x0, {}, {}, 0x0, 0x1}], 0x60) 18:29:52 executing program 0: socket(0xa, 0x0, 0x7f) 18:29:52 executing program 1: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={0x100080, 0x81, 0x40000}, 0x20) 18:29:52 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x2, 0x2, {0x2, 0xf0, 0x2}, {0x1, 0xff, 0x7}, 0xfd, 0xfb}], 0x40) 18:29:52 executing program 3: socket(0xa, 0x1, 0x0) 18:29:52 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x2, 0x2, {0x2, 0xf0, 0x2}, {0x1, 0xff, 0x7}, 0xfd, 0xfb}, {}], 0x60) 18:29:52 executing program 1: mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 18:29:52 executing program 0: socket(0xa, 0x0, 0x7f) 18:29:52 executing program 1: mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 18:29:53 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) msgsnd(0x0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e259244"}, 0x72, 0x0) 18:29:53 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x2, 0x2, {0x2, 0xf0, 0x2}, {0x1, 0xff, 0x7}, 0xfd, 0xfb}], 0x40) 18:29:53 executing program 3: socket(0xa, 0x1, 0x0) 18:29:53 executing program 0: socket(0xa, 0x0, 0x7f) 18:29:53 executing program 1: mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 18:29:53 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {}], 0x40) 18:29:53 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {}], 0x40) 18:29:53 executing program 0: socket(0x0, 0x0, 0x7f) 18:29:53 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x2, 0x2, {0x2, 0xf0, 0x2}, {0x1, 0xff, 0x7}, 0xfd, 0xfb}], 0x40) 18:29:53 executing program 1: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x81, 0x40000}, 0x20) 18:29:53 executing program 3: socket(0x0, 0x1, 0x0) 18:29:53 executing program 0: socket(0x0, 0x0, 0x7f) 18:29:54 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) msgsnd(0x0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e259244"}, 0x72, 0x0) 18:29:54 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {}], 0x40) 18:29:54 executing program 0: socket(0x0, 0x0, 0x7f) 18:29:54 executing program 1: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x81, 0x40000}, 0x20) 18:29:54 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, 0x0, 0x0) 18:29:54 executing program 3: socket(0x0, 0x1, 0x0) 18:29:54 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x0, 0x2, {0x2, 0xf0, 0x2}, {0x1, 0xff, 0x7}, 0xfd, 0xfb}, {}], 0x60) 18:29:54 executing program 0: socket(0xa, 0x0, 0x0) 18:29:54 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, 0x0, 0x0) 18:29:54 executing program 3: socket(0x0, 0x1, 0x0) 18:29:54 executing program 1: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x81, 0x40000}, 0x20) 18:29:54 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, 0x0, 0x0) 18:29:55 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x0, 0x0, {0x2, 0xf0, 0x2}, {0x1, 0xff, 0x7}, 0xfd, 0xfb}, {}], 0x60) 18:29:55 executing program 1: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={0x100080, 0x0, 0x40000}, 0x20) 18:29:55 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) msgsnd(0x0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e25924414548737"}, 0x76, 0x0) 18:29:55 executing program 3: socket(0xa, 0x0, 0x0) 18:29:55 executing program 0: socket(0xa, 0x0, 0x0) 18:29:55 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}], 0x20) 18:29:55 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}], 0x20) 18:29:55 executing program 1: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={0x100080}, 0x20) 18:29:55 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x0, 0x0, {0x0, 0xf0, 0x2}, {0x1, 0xff, 0x7}, 0xfd, 0xfb}, {}], 0x60) 18:29:55 executing program 0: socket(0xa, 0x0, 0x0) 18:29:55 executing program 3: socket(0xa, 0x0, 0x0) 18:29:55 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}], 0x20) 18:29:55 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}], 0x20) 18:29:55 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x0, 0x0, {0x0, 0x0, 0x2}, {0x1, 0xff, 0x7}, 0xfd, 0xfb}, {}], 0x60) 18:29:56 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) msgsnd(0x0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e25924414548737"}, 0x76, 0x0) 18:29:56 executing program 0: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x81, 0x40000}, 0x20) 18:29:56 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x0, 0x2, {0x2, 0xf0, 0x2}, {0x1, 0xff, 0x7}, 0xfd, 0xfb}], 0x40) 18:29:56 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}], 0x20) 18:29:56 executing program 3: socket(0xa, 0x0, 0x0) 18:29:56 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x0, 0x0, {}, {0x1, 0xff, 0x7}, 0xfd, 0xfb}, {}], 0x60) 18:29:56 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}], 0x20) 18:29:56 executing program 0: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x81, 0x40000}, 0x20) 18:29:56 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x0, 0x0, {}, {0x0, 0xff, 0x7}, 0xfd, 0xfb}, {}], 0x60) 18:29:56 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x0, 0x0, {0x2, 0xf0, 0x2}, {0x1, 0xff, 0x7}, 0xfd, 0xfb}], 0x40) 18:29:56 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 18:29:56 executing program 0: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x81, 0x40000}, 0x20) 18:29:57 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) msgsnd(0x0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e25924414548737"}, 0x76, 0x0) 18:29:57 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x0, 0x0, {}, {0x0, 0x0, 0x7}, 0xfd, 0xfb}, {}], 0x60) 18:29:57 executing program 1: setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}], 0x20) 18:29:57 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x0, 0x0, {0x0, 0xf0, 0x2}, {0x1, 0xff, 0x7}, 0xfd, 0xfb}], 0x40) 18:29:57 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 18:29:57 executing program 0: mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 18:29:57 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 18:29:57 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x0, 0x0, {0x0, 0x0, 0x2}, {0x1, 0xff, 0x7}, 0xfd, 0xfb}], 0x40) 18:29:57 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x0, 0x0, {}, {}, 0xfd, 0xfb}, {}], 0x60) 18:29:57 executing program 0: mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 18:29:57 executing program 1: setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}], 0x20) 18:29:57 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x0, 0x0, {}, {0x1, 0xff, 0x7}, 0xfd, 0xfb}], 0x40) 18:29:58 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, 0x0, 0x0) 18:29:58 executing program 1: setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}], 0x20) 18:29:58 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) msgsnd(0x0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e25924414548737a705"}, 0x78, 0x0) 18:29:58 executing program 0: mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 18:29:58 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x0, 0x0, {}, {}, 0x0, 0xfb}, {}], 0x60) 18:29:58 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x0, 0x0, {}, {0x0, 0xff, 0x7}, 0xfd, 0xfb}], 0x40) 18:29:58 executing program 0: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x40000}, 0x20) 18:29:58 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, 0x0, 0x0) 18:29:58 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {}, {}], 0x60) 18:29:58 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}], 0x20) 18:29:58 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x0, 0x0, {}, {0x0, 0x0, 0x7}, 0xfd, 0xfb}], 0x40) 18:29:58 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, 0x0, 0x0) 18:29:58 executing program 0: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x40000}, 0x20) 18:29:58 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}], 0x20) 18:29:59 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) msgsnd(0x0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e25924414548737a705"}, 0x78, 0x0) 18:29:59 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x0, 0x0, {}, {}, 0xfd, 0xfb}], 0x40) 18:29:59 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{}, {}], 0x40) 18:29:59 executing program 0: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x40000}, 0x20) 18:29:59 executing program 3: setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) 18:29:59 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}], 0x20) 18:29:59 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x0, 0x0, {}, {}, 0x0, 0xfb}], 0x40) 18:29:59 executing program 0: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x81}, 0x20) 18:29:59 executing program 3: setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) [ 372.023009][ T3239] ieee802154 phy0 wpan0: encryption failed: -22 [ 372.030073][ T3239] ieee802154 phy1 wpan1: encryption failed: -22 18:29:59 executing program 0: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x40000}, 0x20) 18:29:59 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, 0x0, 0x0) 18:29:59 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{}, {}], 0x40) 18:30:00 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) msgsnd(0x0, &(0x7f0000000100)={0x3, "12c46a0218e55c2f3bb1b64a1a70bc19564de35837c8ec519efee427f188d6bf10feee940ff626d9d23f5e81ce6cf43bca227c4c1370f639f84f555c03e633cd9edd5ececde098b09a7ff0a53f3612b98ed2423ba28efd971fe56e534267d9629a3c93d9eb3d8e25924414548737a705"}, 0x78, 0x0) 18:30:00 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {}], 0x40) 18:30:00 executing program 0: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x40000}, 0x20) 18:30:00 executing program 3: setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) 18:30:00 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{}, {}], 0x40) 18:30:00 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, 0x0, 0x0) 18:30:00 executing program 0: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x40000}, 0x20) 18:30:00 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, 0x0, 0x0) 18:30:00 executing program 3: socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) 18:30:00 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x0, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {}, {}], 0x60) 18:30:00 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{}], 0x20) 18:30:00 executing program 0: mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 18:30:01 executing program 0: mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 18:30:01 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100), 0x0) 18:30:01 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x0, 0x0, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {}, {}], 0x60) 18:30:01 executing program 3: socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) 18:30:01 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{}], 0x20) 18:30:01 executing program 4: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), 0x4) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = socket(0x11, 0x4, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xe1, 0x4) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x1}, 0xe9f69adece58076c}, 0xfffffd1d) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000001c0)={'team0\x00'}) syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:30:01 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x0, 0x0, {0x0, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {}, {}], 0x60) 18:30:01 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100), 0x0) 18:30:01 executing program 0: mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 18:30:01 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{}], 0x20) 18:30:01 executing program 4: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), 0x4) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = socket(0x11, 0x4, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xe1, 0x4) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x1}, 0xe9f69adece58076c}, 0xfffffd1d) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000001c0)={'team0\x00'}) syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:30:01 executing program 3: socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) 18:30:01 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100), 0x0) 18:30:01 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100), 0x0) 18:30:01 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x0, 0x0, {0x0, 0x0, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {}, {}], 0x60) 18:30:01 executing program 4: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), 0x4) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = socket(0x11, 0x4, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xe1, 0x4) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x1}, 0xe9f69adece58076c}, 0xfffffd1d) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000001c0)={'team0\x00'}) syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:30:01 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x0, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {}], 0x40) 18:30:01 executing program 0: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x20) 18:30:01 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x0, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}], 0x20) 18:30:01 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x0, 0x0, {}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {}, {}], 0x60) 18:30:01 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100), 0x0) 18:30:01 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x0, 0x0, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {}], 0x40) 18:30:01 executing program 4: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), 0x4) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = socket(0x11, 0x4, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xe1, 0x4) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x1}, 0xe9f69adece58076c}, 0xfffffd1d) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000001c0)={'team0\x00'}) 18:30:01 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100), 0x0) 18:30:01 executing program 0: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x20) 18:30:01 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x0, 0x0, {0x1, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}], 0x20) 18:30:01 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x0, 0x0, {}, {0x0, 0xff, 0x2}, 0x0, 0x1}, {}, {}], 0x60) 18:30:01 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x0, 0x0, {0x0, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {}], 0x40) 18:30:01 executing program 4: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), 0x4) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = socket(0x11, 0x4, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xe1, 0x4) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x1}, 0xe9f69adece58076c}, 0xfffffd1d) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 18:30:01 executing program 3: setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000100), 0x0) 18:30:01 executing program 0: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x20) 18:30:01 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x0, 0x0, {0x0, 0x1, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}], 0x20) 18:30:01 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x0, 0x0, {}, {0x0, 0x0, 0x2}, 0x0, 0x1}, {}, {}], 0x60) 18:30:01 executing program 3: setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000100), 0x0) 18:30:01 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x0, 0x0, {0x0, 0x0, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {}], 0x40) 18:30:01 executing program 4: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), 0x4) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = socket(0x11, 0x4, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xe1, 0x4) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x1}, 0xe9f69adece58076c}, 0xfffffd1d) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) 18:30:02 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x0, 0x0, {}, {}, 0x0, 0x1}, {}, {}], 0x60) 18:30:02 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x0, 0x0, {0x0, 0x0, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}], 0x20) 18:30:02 executing program 0: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x20) 18:30:02 executing program 3: setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000100), 0x0) 18:30:02 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x0, 0x0, {}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {}], 0x40) 18:30:02 executing program 4: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), 0x4) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket(0x11, 0x4, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0xe1, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) 18:30:02 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{}, {}, {}], 0x60) 18:30:02 executing program 0: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x20) 18:30:02 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x0, 0x0, {}, {0x2, 0xff, 0x2}, 0x0, 0x1}], 0x20) 18:30:02 executing program 3: socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000100), 0x0) 18:30:02 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x0, 0x0, {}, {0x0, 0xff, 0x2}, 0x0, 0x1}, {}], 0x40) 18:30:02 executing program 2: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), 0x4) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = socket(0x11, 0x4, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xe1, 0x4) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x1}, 0xe9f69adece58076c}, 0xfffffd1d) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000001c0)={'team0\x00'}) syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:30:02 executing program 4: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), 0x4) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socket(0x11, 0x4, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) 18:30:02 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x0, 0x0, {}, {0x0, 0xff, 0x2}, 0x0, 0x1}], 0x20) 18:30:02 executing program 0: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x20) 18:30:02 executing program 3: socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000100), 0x0) 18:30:02 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x0, 0x0, {}, {0x0, 0x0, 0x2}, 0x0, 0x1}, {}], 0x40) 18:30:02 executing program 4: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), 0x4) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) 18:30:02 executing program 2: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), 0x4) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = socket(0x11, 0x4, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xe1, 0x4) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x1}, 0xe9f69adece58076c}, 0xfffffd1d) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000001c0)={'team0\x00'}) syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:30:02 executing program 3: socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000100), 0x0) 18:30:02 executing program 0: mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 18:30:02 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x0, 0x0, {}, {0x0, 0x0, 0x2}, 0x0, 0x1}], 0x20) 18:30:02 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x0, 0x0, {}, {}, 0x0, 0x1}, {}], 0x40) 18:30:02 executing program 2: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), 0x4) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = socket(0x11, 0x4, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xe1, 0x4) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x1}, 0xe9f69adece58076c}, 0xfffffd1d) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000001c0)={'team0\x00'}) syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:30:02 executing program 4: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) 18:30:02 executing program 0: mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 18:30:02 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, 0x0, 0x0) 18:30:02 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x0, 0x0, {}, {}, 0x0, 0x1}], 0x20) 18:30:02 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{}, {}], 0x40) 18:30:02 executing program 2: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), 0x4) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = socket(0x11, 0x4, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xe1, 0x4) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x1}, 0xe9f69adece58076c}, 0xfffffd1d) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000001c0)={'team0\x00'}) 18:30:02 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{}], 0x20) 18:30:02 executing program 0: mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 18:30:02 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) 18:30:02 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, 0x0, 0x0) 18:30:03 executing program 2: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), 0x4) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = socket(0x11, 0x4, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xe1, 0x4) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x1}, 0xe9f69adece58076c}, 0xfffffd1d) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 18:30:03 executing program 5: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), 0x4) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = socket(0x11, 0x4, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xe1, 0x4) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x1}, 0xe9f69adece58076c}, 0xfffffd1d) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000001c0)={'team0\x00'}) 18:30:03 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, 0x0, 0x0) 18:30:03 executing program 0: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), 0x4) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = socket(0x11, 0x4, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xe1, 0x4) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x1}, 0xe9f69adece58076c}, 0xfffffd1d) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000001c0)={'team0\x00'}) syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:30:03 executing program 2: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), 0x4) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = socket(0x11, 0x4, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xe1, 0x4) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x1}, 0xe9f69adece58076c}, 0xfffffd1d) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) 18:30:03 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000006540)={{0x3}, 0x0, [0x9, 0x8, 0x5, 0x84b, 0x0, 0x400, 0x6, 0x4, 0x8000, 0x7f, 0x6888, 0x4, 0x0, 0x0, 0x7, 0xd40, 0x1, 0x3a, 0x907, 0x41e, 0x486, 0x3, 0xa03, 0x0, 0x7, 0x6, 0xffffffffffffffff, 0x80000001, 0x7, 0x1, 0x6, 0x6, 0x9, 0x3, 0xffffffffece204b8, 0x5, 0x7, 0x5, 0x6dc0, 0x3f, 0x20, 0x5, 0x1000, 0x3, 0x6, 0x8, 0x8, 0xc5, 0x9, 0x3, 0x8, 0xfff, 0x7, 0xfffffffffffffff9, 0x3d4, 0xf9b3, 0x4, 0x2, 0x50e, 0x2, 0x2, 0x10000, 0x6, 0x8, 0x80, 0x3, 0x81, 0x5, 0xeb33, 0x6, 0x3, 0x1, 0x762, 0x7, 0x2]}) 18:30:03 executing program 5: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), 0x4) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = socket(0x11, 0x4, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xe1, 0x4) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x1}, 0xe9f69adece58076c}, 0xfffffd1d) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000001c0)={'team0\x00'}) 18:30:03 executing program 4: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 18:30:03 executing program 1: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x2]}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:30:03 executing program 2: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), 0x4) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = socket(0x11, 0x4, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xe1, 0x4) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x1}, 0xe9f69adece58076c}, 0xfffffd1d) 18:30:03 executing program 0: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), 0x4) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = socket(0x11, 0x4, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xe1, 0x4) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x1}, 0xe9f69adece58076c}, 0xfffffd1d) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000001c0)={'team0\x00'}) syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:30:03 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, 0x0) 18:30:03 executing program 5: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), 0x4) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = socket(0x11, 0x4, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xe1, 0x4) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x1}, 0xe9f69adece58076c}, 0xfffffd1d) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000001c0)={'team0\x00'}) 18:30:03 executing program 1: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x2]}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:30:03 executing program 4: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 18:30:03 executing program 2: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), 0x4) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socket(0x11, 0x4, 0x1) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x1}, 0xe9f69adece58076c}, 0xfffffd1d) 18:30:03 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, 0x0) 18:30:03 executing program 0: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), 0x4) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = socket(0x11, 0x4, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xe1, 0x4) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x1}, 0xe9f69adece58076c}, 0xfffffd1d) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000001c0)={'team0\x00'}) syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:30:03 executing program 5: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), 0x4) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = socket(0x11, 0x4, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xe1, 0x4) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x1}, 0xe9f69adece58076c}, 0xfffffd1d) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 18:30:03 executing program 4: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 18:30:03 executing program 1: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x2]}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:30:03 executing program 2: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), 0x4) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x1}, 0xe9f69adece58076c}, 0xfffffd1d) 18:30:03 executing program 5: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), 0x4) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = socket(0x11, 0x4, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xe1, 0x4) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x1}, 0xe9f69adece58076c}, 0xfffffd1d) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) 18:30:03 executing program 4: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), 0x4) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = socket(0x11, 0x4, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xe1, 0x4) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x1}, 0xe9f69adece58076c}, 0xfffffd1d) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 18:30:03 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, 0x0) 18:30:03 executing program 0: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), 0x4) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = socket(0x11, 0x4, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xe1, 0x4) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x1}, 0xe9f69adece58076c}, 0xfffffd1d) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000001c0)={'team0\x00'}) 18:30:03 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x2]}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:30:03 executing program 3: ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) 18:30:03 executing program 2: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), 0x4) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x1}, 0xe9f69adece58076c}, 0xfffffd1d) 18:30:03 executing program 5: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), 0x4) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket(0x11, 0x4, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0xe1, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) 18:30:03 executing program 2: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), 0x4) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x1}, 0xe9f69adece58076c}, 0xfffffd1d) 18:30:04 executing program 3: ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) 18:30:04 executing program 1: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:30:04 executing program 4: syz_io_uring_setup(0x3f28, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x2, 0x193}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000080)) r1 = socket$pppl2tp(0x18, 0x1, 0x1) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) connect$pppl2tp(r1, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x4, 0x1, 0x4, {0xa, 0x4e22, 0x3, @mcast2, 0x4}}}, 0x3a) 18:30:04 executing program 0: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), 0x4) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = socket(0x11, 0x4, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xe1, 0x4) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x1}, 0xe9f69adece58076c}, 0xfffffd1d) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 18:30:04 executing program 5: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), 0x4) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socket(0x11, 0x4, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) 18:30:04 executing program 2: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), 0x4) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x1}, 0xe9f69adece58076c}, 0xfffffd1d) 18:30:04 executing program 3: ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) 18:30:04 executing program 1: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:30:04 executing program 4: r0 = fork() perf_event_open(0x0, r0, 0x3, 0xffffffffffffffff, 0xa) 18:30:04 executing program 5: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), 0x4) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) 18:30:04 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x1}, 0xe9f69adece58076c}, 0xfffffd1d) 18:30:04 executing program 0: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), 0x4) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = socket(0x11, 0x4, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xe1, 0x4) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x1}, 0xe9f69adece58076c}, 0xfffffd1d) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) 18:30:04 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, 0x0) 18:30:04 executing program 5: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) 18:30:04 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x1}, 0xe9f69adece58076c}, 0xfffffd1d) 18:30:04 executing program 4: r0 = fork() perf_event_open(0x0, r0, 0x3, 0xffffffffffffffff, 0xa) 18:30:04 executing program 1: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:30:04 executing program 0: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), 0x4) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = socket(0x11, 0x4, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xe1, 0x4) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x1}, 0xe9f69adece58076c}, 0xfffffd1d) 18:30:04 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, 0x0) 18:30:04 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) 18:30:04 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x1}, 0xe9f69adece58076c}, 0xfffffd1d) 18:30:04 executing program 0: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), 0x4) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket(0x11, 0x4, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0xe1, 0x4) 18:30:04 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x2]}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 18:30:04 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 18:30:04 executing program 4: r0 = fork() perf_event_open(0x0, r0, 0x3, 0xffffffffffffffff, 0xa) 18:30:04 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, 0x0) 18:30:04 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x1}, 0xe9f69adece58076c}, 0xfffffd1d) 18:30:04 executing program 0: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), 0x4) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socket(0x11, 0x4, 0x1) 18:30:04 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 18:30:04 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x2]}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 18:30:05 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) 18:30:05 executing program 4: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xa) 18:30:05 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x1}, 0xe9f69adece58076c}, 0xfffffd1d) 18:30:05 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 18:30:05 executing program 0: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000100), 0x4) socket(0x11, 0x4, 0x1) 18:30:05 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x1}, 0xe9f69adece58076c}, 0xfffffd1d) 18:30:05 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x2]}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 18:30:05 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) 18:30:05 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) 18:30:05 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 18:30:05 executing program 0: socket(0x11, 0x4, 0x1) 18:30:05 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x1}, 0xe9f69adece58076c}, 0xfffffd1d) 18:30:05 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x2]}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), 0x0) 18:30:05 executing program 5: syz_io_uring_setup(0x3f28, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x2, 0x193}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000080)) r1 = socket$pppl2tp(0x18, 0x1, 0x1) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000280)={0x6, 0x6, 0x10001, 0x7f, 'syz0\x00', 0x8}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f4200000800000d40af334200000000"]) connect$pppl2tp(r1, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x4, 0x1, 0x4, {0xa, 0x4e22, 0x3, @mcast2, 0x4}}}, 0x3a) 18:30:05 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:30:05 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) 18:30:05 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) connect$can_j1939(r0, 0x0, 0x0) 18:30:05 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x2]}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), 0x0) 18:30:05 executing program 0: socket(0x0, 0x4, 0x1) 18:30:05 executing program 5: syz_io_uring_setup(0x3f28, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x2, 0x193}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000080)) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000280)={0x6, 0x6, 0x10001, 0x7f, 'syz0\x00', 0x8}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f4200000800000d40af334200000000"]) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) connect$pppl2tp(r1, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x4, 0x1, 0x4, {0xa, 0x4e22, 0x3, @mcast2, 0x4}}}, 0x3a) 18:30:05 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) connect$can_j1939(r0, 0x0, 0x0) 18:30:05 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) connect$can_j1939(r0, 0x0, 0x0) 18:30:05 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x800, 0x7d, &(0x7f00000002c0)=""/125, 0x41100, 0x6, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x2, 0x3, 0x2}, 0x10, 0x2ae15}, 0x78) 18:30:05 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x2]}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), 0x0) 18:30:05 executing program 0: socket(0x0, 0x4, 0x1) 18:30:05 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) connect$can_j1939(r0, 0x0, 0x0) 18:30:05 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) connect$can_j1939(r0, 0x0, 0x0) 18:30:05 executing program 1: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = socket(0x2c, 0x80000, 0x7ff) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000001340), &(0x7f0000001380)=0x4) fork() perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x7, 0x3, 0x2, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x30, 0x5, 0x0, 0x7, 0x800, 0x7f, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 18:30:05 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x800, 0x7d, &(0x7f00000002c0)=""/125, 0x41100, 0x6, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x2, 0x3, 0x2}, 0x10, 0x2ae15}, 0x78) 18:30:05 executing program 5: syz_io_uring_setup(0x3f28, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x2, 0x193}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000080)) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000280)={0x6, 0x6, 0x10001, 0x7f, 'syz0\x00', 0x8}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f4200000800000d40af334200000000"]) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) connect$pppl2tp(r1, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x4, 0x1, 0x4, {0xa, 0x4e22, 0x3, @mcast2, 0x4}}}, 0x3a) 18:30:05 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) connect$can_j1939(r0, 0x0, 0x0) 18:30:05 executing program 0: socket(0x0, 0x4, 0x1) 18:30:05 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, 0x0, 0x0, {0x1, 0xf0, 0x1}, 0xe9f69adece58076c}, 0xfffffd1d) 18:30:05 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x800, 0x7d, &(0x7f00000002c0)=""/125, 0x41100, 0x6, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x2, 0x3, 0x2}, 0x10, 0x2ae15}, 0x78) 18:30:05 executing program 4: connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) 18:30:05 executing program 0: socket(0x11, 0x0, 0x1) 18:30:05 executing program 5: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = socket(0x2c, 0x80000, 0x7ff) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000001340), &(0x7f0000001380)=0x4) fork() r1 = fork() getpgid(r1) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x7, 0x3, 0x2, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x30, 0x5, 0x0, 0x7, 0x800, 0x7f, 0x3}, r1, 0x3, 0xffffffffffffffff, 0xa) 18:30:05 executing program 1: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = socket(0x2c, 0x80000, 0x7ff) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000001340), &(0x7f0000001380)=0x4) fork() perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x7, 0x3, 0x2, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x30, 0x5, 0x0, 0x7, 0x800, 0x7f, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 18:30:06 executing program 4: connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) 18:30:06 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, 0x0, 0x0, {0x0, 0xf0, 0x1}, 0xe9f69adece58076c}, 0xfffffd1d) 18:30:06 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 18:30:06 executing program 0: socket(0x11, 0x0, 0x0) 18:30:06 executing program 1: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = socket(0x2c, 0x80000, 0x7ff) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000001340), &(0x7f0000001380)=0x4) fork() perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x7, 0x3, 0x2, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x30, 0x5, 0x0, 0x7, 0x800, 0x7f, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 18:30:06 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x1}, 0xe9f69adece58076c}, 0xfffffd1d) 18:30:06 executing program 5: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x10003, 0x0, 0x41c3d89d571a7db7, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) fork() 18:30:06 executing program 4: connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) 18:30:06 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 18:30:06 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) fork() fork() syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 18:30:06 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, 0x0, 0x0, {}, 0xe9f69adece58076c}, 0xfffffd1d) 18:30:06 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 18:30:06 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$can_j1939(r0, 0x0, 0x0) 18:30:06 executing program 5: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x10003, 0x0, 0x41c3d89d571a7db7, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) fork() 18:30:06 executing program 1: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = socket(0x2c, 0x80000, 0x7ff) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000001340), &(0x7f0000001380)=0x4) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x7, 0x3, 0x2, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x30, 0x5, 0x0, 0x7, 0x800, 0x7f, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 18:30:06 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) connect$can_j1939(r0, &(0x7f0000000140), 0xfffffd1d) 18:30:06 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000100)={0x0, 0x4008f2d, 0x20, 0x0, 0x7d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) io_uring_setup(0xd78, &(0x7f0000000040)={0x0, 0xc7cb, 0x0, 0x0, 0x154, 0x0, r0}) r1 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000280)=ANY=[@ANYBLOB="0300b67f9dac44365a48ad899ef5fdc600000000000000030000353573b8545ad406b50000008000000000564c1b9361257b6d27aa7c7e6c72b8d41affc560ecc4fffd21dcd4fa62a07f7f9669f7df59036df13b895eed82df59ea0f7e6647f05dafab3e0bc0408ceb66f4297f0b7c0e68ec9506bea08f84dd67723c4a14584a6ead2b6730a66a5adae2ea7792ab5736adfe931b47ad"]) r2 = shmget(0x1, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000fff000/0x1000)=nil, 0x0) 18:30:06 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$can_j1939(r0, 0x0, 0x0) 18:30:06 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x800, 0x7d, &(0x7f00000002c0)=""/125, 0x41100, 0x6, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x2, 0x3, 0x2}, 0x10, 0x2ae15}, 0x78) 18:30:06 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$can_j1939(r0, 0x0, 0x0) 18:30:06 executing program 5: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x10003, 0x0, 0x41c3d89d571a7db7, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) fork() 18:30:06 executing program 1: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) socket(0x2c, 0x80000, 0x7ff) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x7, 0x3, 0x2, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x30, 0x5, 0x0, 0x7, 0x800, 0x7f, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 18:30:06 executing program 2: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000100)={0x0, 0x4008f2d, 0x20, 0x0, 0x7d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) io_uring_setup(0xd78, &(0x7f0000000040)={0x0, 0xc7cb, 0x0, 0x0, 0x154, 0x0, r0}) r1 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000280)=ANY=[@ANYBLOB="0300b67f9dac44365a48ad899ef5fdc600000000000000030000353573b8545ad406b50000008000000000564c1b9361257b6d27aa7c7e6c72b8d41affc560ecc4fffd21dcd4fa62a07f7f9669f7df59036df13b895eed82df59ea0f7e6647f05dafab3e0bc0408ceb66f4297f0b7c0e68ec9506bea08f84dd67723c4a14584a6ead2b6730a66a5adae2ea7792ab5736adfe931b47ad"]) r2 = shmget(0x1, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000fff000/0x1000)=nil, 0x0) 18:30:06 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000100)={0x0, 0x4008f2d, 0x20, 0x0, 0x7d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) io_uring_setup(0xd78, &(0x7f0000000040)={0x0, 0xc7cb, 0x0, 0x0, 0x154, 0x0, r0}) r1 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000280)=ANY=[@ANYBLOB="0300b67f9dac44365a48ad899ef5fdc600000000000000030000353573b8545ad406b50000008000000000564c1b9361257b6d27aa7c7e6c72b8d41affc560ecc4fffd21dcd4fa62a07f7f9669f7df59036df13b895eed82df59ea0f7e6647f05dafab3e0bc0408ceb66f4297f0b7c0e68ec9506bea08f84dd67723c4a14584a6ead2b6730a66a5adae2ea7792ab5736adfe931b47ad"]) r2 = shmget(0x1, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000fff000/0x1000)=nil, 0x0) 18:30:06 executing program 5: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x10003, 0x0, 0x41c3d89d571a7db7, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) 18:30:06 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) 18:30:06 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x800, 0x7d, &(0x7f00000002c0)=""/125, 0x41100, 0x6, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x2, 0x3, 0x2}, 0x10, 0x2ae15}, 0x78) 18:30:06 executing program 2: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000100)={0x0, 0x4008f2d, 0x20, 0x0, 0x7d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) io_uring_setup(0xd78, &(0x7f0000000040)={0x0, 0xc7cb, 0x0, 0x0, 0x154, 0x0, r0}) r1 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000280)=ANY=[@ANYBLOB="0300b67f9dac44365a48ad899ef5fdc600000000000000030000353573b8545ad406b50000008000000000564c1b9361257b6d27aa7c7e6c72b8d41affc560ecc4fffd21dcd4fa62a07f7f9669f7df59036df13b895eed82df59ea0f7e6647f05dafab3e0bc0408ceb66f4297f0b7c0e68ec9506bea08f84dd67723c4a14584a6ead2b6730a66a5adae2ea7792ab5736adfe931b47ad"]) r2 = shmget(0x1, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000fff000/0x1000)=nil, 0x0) 18:30:06 executing program 1: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x7, 0x3, 0x2, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x30, 0x5, 0x0, 0x7, 0x800, 0x7f, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 18:30:06 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000100)={0x0, 0x4008f2d, 0x20, 0x0, 0x7d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) io_uring_setup(0xd78, &(0x7f0000000040)={0x0, 0xc7cb, 0x0, 0x0, 0x154, 0x0, r0}) r1 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000280)=ANY=[@ANYBLOB="0300b67f9dac44365a48ad899ef5fdc600000000000000030000353573b8545ad406b50000008000000000564c1b9361257b6d27aa7c7e6c72b8d41affc560ecc4fffd21dcd4fa62a07f7f9669f7df59036df13b895eed82df59ea0f7e6647f05dafab3e0bc0408ceb66f4297f0b7c0e68ec9506bea08f84dd67723c4a14584a6ead2b6730a66a5adae2ea7792ab5736adfe931b47ad"]) r2 = shmget(0x1, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000fff000/0x1000)=nil, 0x0) 18:30:06 executing program 5: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 18:30:06 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) 18:30:06 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x800, 0x7d, &(0x7f00000002c0)=""/125, 0x41100, 0x6, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x2, 0x3, 0x2}, 0x10, 0x2ae15}, 0x78) 18:30:06 executing program 2: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000100)={0x0, 0x4008f2d, 0x20, 0x0, 0x7d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) io_uring_setup(0xd78, &(0x7f0000000040)={0x0, 0xc7cb, 0x0, 0x0, 0x154, 0x0, r0}) r1 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000280)=ANY=[@ANYBLOB="0300b67f9dac44365a48ad899ef5fdc600000000000000030000353573b8545ad406b50000008000000000564c1b9361257b6d27aa7c7e6c72b8d41affc560ecc4fffd21dcd4fa62a07f7f9669f7df59036df13b895eed82df59ea0f7e6647f05dafab3e0bc0408ceb66f4297f0b7c0e68ec9506bea08f84dd67723c4a14584a6ead2b6730a66a5adae2ea7792ab5736adfe931b47ad"]) r2 = shmget(0x1, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000fff000/0x1000)=nil, 0x0) 18:30:06 executing program 1: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x7, 0x3, 0x2, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x30, 0x5, 0x0, 0x7, 0x800, 0x7f, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 18:30:06 executing program 5: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) 18:30:07 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000100)={0x0, 0x4008f2d, 0x20, 0x0, 0x7d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) io_uring_setup(0xd78, &(0x7f0000000040)={0x0, 0xc7cb, 0x0, 0x0, 0x154, 0x0, r0}) r1 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000280)=ANY=[@ANYBLOB="0300b67f9dac44365a48ad899ef5fdc600000000000000030000353573b8545ad406b50000008000000000564c1b9361257b6d27aa7c7e6c72b8d41affc560ecc4fffd21dcd4fa62a07f7f9669f7df59036df13b895eed82df59ea0f7e6647f05dafab3e0bc0408ceb66f4297f0b7c0e68ec9506bea08f84dd67723c4a14584a6ead2b6730a66a5adae2ea7792ab5736adfe931b47ad"]) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0) 18:30:07 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) 18:30:07 executing program 2: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000100)={0x0, 0x4008f2d, 0x20, 0x0, 0x7d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) io_uring_setup(0xd78, &(0x7f0000000040)={0x0, 0xc7cb, 0x0, 0x0, 0x154, 0x0, r0}) r1 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000280)=ANY=[@ANYBLOB="0300b67f9dac44365a48ad899ef5fdc600000000000000030000353573b8545ad406b50000008000000000564c1b9361257b6d27aa7c7e6c72b8d41affc560ecc4fffd21dcd4fa62a07f7f9669f7df59036df13b895eed82df59ea0f7e6647f05dafab3e0bc0408ceb66f4297f0b7c0e68ec9506bea08f84dd67723c4a14584a6ead2b6730a66a5adae2ea7792ab5736adfe931b47ad"]) shmget(0x1, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil) 18:30:07 executing program 5: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7) 18:30:07 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x7d, &(0x7f00000002c0)=""/125, 0x41100, 0x6, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x2, 0x3, 0x2}, 0x10, 0x2ae15}, 0x78) 18:30:07 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), 0x0) fork() fork() syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1eb3, &(0x7f0000000400), &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 18:30:07 executing program 1: perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x7, 0x3, 0x2, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x30, 0x5, 0x0, 0x7, 0x800, 0x7f, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 18:30:07 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x2, 0x3, 0x2}, 0x10, 0x2ae15}, 0x78) 18:30:07 executing program 5: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7) 18:30:07 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000100)={0x0, 0x4008f2d, 0x20, 0x0, 0x7d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) io_uring_setup(0xd78, &(0x7f0000000040)={0x0, 0xc7cb, 0x0, 0x0, 0x154, 0x0, r0}) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0) 18:30:07 executing program 2: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000100)={0x0, 0x4008f2d, 0x20, 0x0, 0x7d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) io_uring_setup(0xd78, &(0x7f0000000040)={0x0, 0xc7cb, 0x0, 0x0, 0x154, 0x0, r0}) r1 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000280)=ANY=[@ANYBLOB="0300b67f9dac44365a48ad899ef5fdc600000000000000030000353573b8545ad406b50000008000000000564c1b9361257b6d27aa7c7e6c72b8d41affc560ecc4fffd21dcd4fa62a07f7f9669f7df59036df13b895eed82df59ea0f7e6647f05dafab3e0bc0408ceb66f4297f0b7c0e68ec9506bea08f84dd67723c4a14584a6ead2b6730a66a5adae2ea7792ab5736adfe931b47ad"]) 18:30:07 executing program 5: msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7) 18:30:07 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x2, 0x3, 0x2}, 0x10, 0x2ae15}, 0x78) 18:30:07 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000100)={0x0, 0x4008f2d, 0x20, 0x0, 0x7d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) io_uring_setup(0xd78, &(0x7f0000000040)={0x0, 0xc7cb, 0x0, 0x0, 0x154, 0x0, r0}) r1 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000280)=ANY=[@ANYBLOB="0300b67f9dac44365a48ad899ef5fdc600000000000000030000353573b8545ad406b50000008000000000564c1b9361257b6d27aa7c7e6c72b8d41affc560ecc4fffd21dcd4fa62a07f7f9669f7df59036df13b895eed82df59ea0f7e6647f05dafab3e0bc0408ceb66f4297f0b7c0e68ec9506bea08f84dd67723c4a14584a6ead2b6730a66a5adae2ea7792ab5736adfe931b47ad"]) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0) 18:30:07 executing program 1: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xa) 18:30:07 executing program 2: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000100)={0x0, 0x4008f2d, 0x20, 0x0, 0x7d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) io_uring_setup(0xd78, &(0x7f0000000040)={0x0, 0xc7cb, 0x0, 0x0, 0x154, 0x0, r0}) r1 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000280)=ANY=[@ANYBLOB="0300b67f9dac44365a48ad899ef5fdc600000000000000030000353573b8545ad406b50000008000000000564c1b9361257b6d27aa7c7e6c72b8d41affc560ecc4fffd21dcd4fa62a07f7f9669f7df59036df13b895eed82df59ea0f7e6647f05dafab3e0bc0408ceb66f4297f0b7c0e68ec9506bea08f84dd67723c4a14584a6ead2b6730a66a5adae2ea7792ab5736adfe931b47ad"]) 18:30:07 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000100)={0x0, 0x4008f2d, 0x20, 0x0, 0x7d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) io_uring_setup(0xd78, &(0x7f0000000040)={0x0, 0xc7cb, 0x0, 0x0, 0x154, 0x0, r0}) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0) 18:30:07 executing program 5: msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 18:30:07 executing program 1: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xa) 18:30:07 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x2, 0x3, 0x2}, 0x10, 0x2ae15}, 0x78) 18:30:07 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000100)={0x0, 0x4008f2d, 0x20, 0x0, 0x7d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) io_uring_setup(0xd78, &(0x7f0000000040)={0x0, 0xc7cb, 0x0, 0x0, 0x154, 0x0, r0}) r1 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000280)=ANY=[@ANYBLOB="0300b67f9dac44365a48ad899ef5fdc600000000000000030000353573b8545ad406b50000008000000000564c1b9361257b6d27aa7c7e6c72b8d41affc560ecc4fffd21dcd4fa62a07f7f9669f7df59036df13b895eed82df59ea0f7e6647f05dafab3e0bc0408ceb66f4297f0b7c0e68ec9506bea08f84dd67723c4a14584a6ead2b6730a66a5adae2ea7792ab5736adfe931b47ad"]) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0) 18:30:07 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000100)={0x0, 0x4008f2d, 0x20, 0x0, 0x7d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) io_uring_setup(0xd78, &(0x7f0000000040)={0x0, 0xc7cb, 0x0, 0x0, 0x154, 0x0, r0}) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0) 18:30:07 executing program 2: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000100)={0x0, 0x4008f2d, 0x20, 0x0, 0x7d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) io_uring_setup(0xd78, &(0x7f0000000040)={0x0, 0xc7cb, 0x0, 0x0, 0x154, 0x0, r0}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000280)=ANY=[@ANYBLOB="0300b67f9dac44365a48ad899ef5fdc600000000000000030000353573b8545ad406b50000008000000000564c1b9361257b6d27aa7c7e6c72b8d41affc560ecc4fffd21dcd4fa62a07f7f9669f7df59036df13b895eed82df59ea0f7e6647f05dafab3e0bc0408ceb66f4297f0b7c0e68ec9506bea08f84dd67723c4a14584a6ead2b6730a66a5adae2ea7792ab5736adfe931b47ad"]) 18:30:07 executing program 5: msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 18:30:07 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x2, 0x3, 0x2}, 0x10, 0x2ae15}, 0x78) 18:30:07 executing program 1: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xa) 18:30:07 executing program 2: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000100)={0x0, 0x4008f2d, 0x20, 0x0, 0x7d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) io_uring_setup(0xd78, &(0x7f0000000040)={0x0, 0xc7cb, 0x0, 0x0, 0x154, 0x0, r0}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000280)=ANY=[@ANYBLOB="0300b67f9dac44365a48ad899ef5fdc600000000000000030000353573b8545ad406b50000008000000000564c1b9361257b6d27aa7c7e6c72b8d41affc560ecc4fffd21dcd4fa62a07f7f9669f7df59036df13b895eed82df59ea0f7e6647f05dafab3e0bc0408ceb66f4297f0b7c0e68ec9506bea08f84dd67723c4a14584a6ead2b6730a66a5adae2ea7792ab5736adfe931b47ad"]) 18:30:07 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000100)={0x0, 0x4008f2d, 0x20, 0x0, 0x7d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) io_uring_setup(0xd78, &(0x7f0000000040)={0x0, 0xc7cb, 0x0, 0x0, 0x154, 0x0, r0}) r1 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000280)=ANY=[@ANYBLOB="0300b67f9dac44365a48ad899ef5fdc600000000000000030000353573b8545ad406b50000008000000000564c1b9361257b6d27aa7c7e6c72b8d41affc560ecc4fffd21dcd4fa62a07f7f9669f7df59036df13b895eed82df59ea0f7e6647f05dafab3e0bc0408ceb66f4297f0b7c0e68ec9506bea08f84dd67723c4a14584a6ead2b6730a66a5adae2ea7792ab5736adfe931b47ad"]) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0) 18:30:07 executing program 5: msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 18:30:07 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000100)={0x0, 0x4008f2d, 0x20, 0x0, 0x7d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0) 18:30:07 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x3, 0x2, 0x3, 0x2}, 0x10, 0x2ae15}, 0x78) 18:30:07 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x7, 0x3, 0x2, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x30, 0x5, 0x0, 0x7, 0x800, 0x7f, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 18:30:08 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000100)={0x0, 0x4008f2d, 0x20, 0x0, 0x7d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) io_uring_setup(0xd78, &(0x7f0000000040)={0x0, 0xc7cb, 0x0, 0x0, 0x154, 0x0, r0}) r1 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000280)=ANY=[@ANYBLOB="0300b67f9dac44365a48ad899ef5fdc600000000000000030000353573b8545ad406b50000008000000000564c1b9361257b6d27aa7c7e6c72b8d41affc560ecc4fffd21dcd4fa62a07f7f9669f7df59036df13b895eed82df59ea0f7e6647f05dafab3e0bc0408ceb66f4297f0b7c0e68ec9506bea08f84dd67723c4a14584a6ead2b6730a66a5adae2ea7792ab5736adfe931b47ad"]) 18:30:08 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x12, r0, 0x10000000) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = fork() mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2000000, 0x1010, r0, 0x10000000) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0xfffffffffffffffe, &(0x7f00000001c0)=""/146) 18:30:08 executing program 2: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000100)={0x0, 0x4008f2d, 0x20, 0x0, 0x7d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) io_uring_setup(0xd78, &(0x7f0000000040)={0x0, 0xc7cb, 0x0, 0x0, 0x154, 0x0, r0}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000280)=ANY=[@ANYBLOB="0300b67f9dac44365a48ad899ef5fdc600000000000000030000353573b8545ad406b50000008000000000564c1b9361257b6d27aa7c7e6c72b8d41affc560ecc4fffd21dcd4fa62a07f7f9669f7df59036df13b895eed82df59ea0f7e6647f05dafab3e0bc0408ceb66f4297f0b7c0e68ec9506bea08f84dd67723c4a14584a6ead2b6730a66a5adae2ea7792ab5736adfe931b47ad"]) 18:30:08 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2ae15}, 0x78) 18:30:08 executing program 0: shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0) 18:30:08 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000100)={0x0, 0x4008f2d, 0x20, 0x0, 0x7d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) io_uring_setup(0xd78, &(0x7f0000000040)={0x0, 0xc7cb, 0x0, 0x0, 0x154, 0x0, r0}) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:08 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x3, 0x2, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x30, 0x5, 0x0, 0x7, 0x800, 0x7f, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 18:30:08 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x12, r0, 0x10000000) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = fork() mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2000000, 0x1010, r0, 0x10000000) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0xfffffffffffffffe, &(0x7f00000001c0)=""/146) 18:30:08 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000100)={0x0, 0x4008f2d, 0x20, 0x0, 0x7d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000280)=ANY=[@ANYBLOB="0300b67f9dac44365a48ad899ef5fdc600000000000000030000353573b8545ad406b50000008000000000564c1b9361257b6d27aa7c7e6c72b8d41affc560ecc4fffd21dcd4fa62a07f7f9669f7df59036df13b895eed82df59ea0f7e6647f05dafab3e0bc0408ceb66f4297f0b7c0e68ec9506bea08f84dd67723c4a14584a6ead2b6730a66a5adae2ea7792ab5736adfe931b47ad"]) 18:30:08 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:30:08 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00', r0) fork() r1 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x7, 0x14000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f00000001c0)=0x1) 18:30:08 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000100)={0x0, 0x4008f2d, 0x20, 0x0, 0x7d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) io_uring_setup(0xd78, &(0x7f0000000040)={0x0, 0xc7cb, 0x0, 0x0, 0x154, 0x0, r0}) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) 18:30:08 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x12, r0, 0x10000000) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = fork() mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2000000, 0x1010, r0, 0x10000000) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0xfffffffffffffffe, &(0x7f00000001c0)=""/146) 18:30:08 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000280)=ANY=[@ANYBLOB="0300b67f9dac44365a48ad899ef5fdc600000000000000030000353573b8545ad406b50000008000000000564c1b9361257b6d27aa7c7e6c72b8d41affc560ecc4fffd21dcd4fa62a07f7f9669f7df59036df13b895eed82df59ea0f7e6647f05dafab3e0bc0408ceb66f4297f0b7c0e68ec9506bea08f84dd67723c4a14584a6ead2b6730a66a5adae2ea7792ab5736adfe931b47ad"]) 18:30:08 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x2, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x30, 0x5, 0x0, 0x7, 0x800, 0x7f, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 18:30:08 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:08 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00', r0) fork() r1 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x7, 0x14000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f00000001c0)=0x1) 18:30:08 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000100)={0x0, 0x4008f2d, 0x20, 0x0, 0x7d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) io_uring_setup(0xd78, &(0x7f0000000040)={0x0, 0xc7cb, 0x0, 0x0, 0x154, 0x0, r0}) 18:30:08 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000280)=ANY=[@ANYBLOB="0300b67f9dac44365a48ad899ef5fdc600000000000000030000353573b8545ad406b50000008000000000564c1b9361257b6d27aa7c7e6c72b8d41affc560ecc4fffd21dcd4fa62a07f7f9669f7df59036df13b895eed82df59ea0f7e6647f05dafab3e0bc0408ceb66f4297f0b7c0e68ec9506bea08f84dd67723c4a14584a6ead2b6730a66a5adae2ea7792ab5736adfe931b47ad"]) 18:30:08 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x12, r0, 0x10000000) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2000000, 0x1010, r0, 0x10000000) 18:30:08 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:08 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x30, 0x5, 0x0, 0x7, 0x800, 0x7f, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 18:30:08 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000280)=ANY=[@ANYBLOB="0300b67f9dac44365a48ad899ef5fdc600000000000000030000353573b8545ad406b50000008000000000564c1b9361257b6d27aa7c7e6c72b8d41affc560ecc4fffd21dcd4fa62a07f7f9669f7df59036df13b895eed82df59ea0f7e6647f05dafab3e0bc0408ceb66f4297f0b7c0e68ec9506bea08f84dd67723c4a14584a6ead2b6730a66a5adae2ea7792ab5736adfe931b47ad"]) 18:30:08 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00', r0) fork() r1 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x7, 0x14000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f00000001c0)=0x1) 18:30:08 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000100)={0x0, 0x4008f2d, 0x20, 0x0, 0x7d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) 18:30:08 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x12, r0, 0x10000000) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:08 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x30, 0x5, 0x0, 0x7, 0x800, 0x7f, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 18:30:08 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000280)=ANY=[@ANYBLOB="0300b67f9dac44365a48ad899ef5fdc600000000000000030000353573b8545ad406b50000008000000000564c1b9361257b6d27aa7c7e6c72b8d41affc560ecc4fffd21dcd4fa62a07f7f9669f7df59036df13b895eed82df59ea0f7e6647f05dafab3e0bc0408ceb66f4297f0b7c0e68ec9506bea08f84dd67723c4a14584a6ead2b6730a66a5adae2ea7792ab5736adfe931b47ad"]) 18:30:08 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:08 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00', r0) fork() syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x7, 0x14000) 18:30:09 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000280)=ANY=[@ANYBLOB="0300b67f9dac44365a48ad899ef5fdc600000000000000030000353573b8545ad406b50000008000000000564c1b9361257b6d27aa7c7e6c72b8d41affc560ecc4fffd21dcd4fa62a07f7f9669f7df59036df13b895eed82df59ea0f7e6647f05dafab3e0bc0408ceb66f4297f0b7c0e68ec9506bea08f84dd67723c4a14584a6ead2b6730a66a5adae2ea7792ab5736adfe931b47ad"]) 18:30:09 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x12, r0, 0x10000000) fork() 18:30:09 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x4008f2d, 0x20, 0x0, 0x7d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) 18:30:09 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x30, 0x5, 0x0, 0x7, 0x800, 0x7f, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 18:30:09 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) 18:30:09 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000280)=ANY=[@ANYBLOB="0300b67f9dac44365a48ad899ef5fdc600000000000000030000353573b8545ad406b50000008000000000564c1b9361257b6d27aa7c7e6c72b8d41affc560ecc4fffd21dcd4fa62a07f7f9669f7df59036df13b895eed82df59ea0f7e6647f05dafab3e0bc0408ceb66f4297f0b7c0e68ec9506bea08f84dd67723c4a14584a6ead2b6730a66a5adae2ea7792ab5736adfe931b47ad"]) 18:30:09 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00', r0) syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x7, 0x14000) 18:30:09 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x4008f2d, 0x20, 0x0, 0x7d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) 18:30:09 executing program 5: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) fork() 18:30:09 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x30, 0x5, 0x0, 0x7, 0x800, 0x7f, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 18:30:09 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) 18:30:09 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x4008f2d, 0x20, 0x0, 0x7d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) 18:30:09 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x7, 0x14000) 18:30:09 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000280)=ANY=[@ANYBLOB="0300b67f9dac44365a48ad899ef5fdc600000000000000030000353573b8545ad406b50000008000000000564c1b9361257b6d27aa7c7e6c72b8d41affc560ecc4fffd21dcd4fa62a07f7f9669f7df59036df13b895eed82df59ea0f7e6647f05dafab3e0bc0408ceb66f4297f0b7c0e68ec9506bea08f84dd67723c4a14584a6ead2b6730a66a5adae2ea7792ab5736adfe931b47ad"]) 18:30:09 executing program 5: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) fork() 18:30:09 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) 18:30:09 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x30, 0x5, 0x0, 0x7, 0x800, 0x7f, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 18:30:09 executing program 4: syz_io_uring_setup(0x3f27, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) 18:30:09 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, 0x0) 18:30:09 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x7, 0x14000) 18:30:09 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x30, 0x5, 0x0, 0x7, 0x800, 0x7f, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 18:30:09 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) fork() 18:30:09 executing program 5: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) fork() 18:30:09 executing program 4: syz_io_uring_setup(0x3f27, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) 18:30:09 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x7, 0x14000) 18:30:09 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) fork() 18:30:09 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) fork() 18:30:09 executing program 4: syz_io_uring_setup(0x3f27, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) 18:30:09 executing program 5: mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x12, 0xffffffffffffffff, 0x10000000) fork() 18:30:09 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x30, 0x5, 0x0, 0x7, 0x800, 0x7f, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 18:30:09 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) 18:30:09 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x7, 0x14000) 18:30:09 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000100)={0x0, 0x0, 0x20, 0x0, 0x7d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) 18:30:10 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) fork() 18:30:10 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x30, 0x5, 0x0, 0x7, 0x800, 0x7f, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 18:30:10 executing program 5: mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x12, 0xffffffffffffffff, 0x10000000) fork() 18:30:10 executing program 0: syz_open_dev$sndctrl(0x0, 0x7, 0x14000) 18:30:10 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) 18:30:10 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) 18:30:10 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x30, 0x5, 0x0, 0x7, 0x800, 0x7f, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 18:30:10 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:10 executing program 0: syz_open_dev$sndctrl(0x0, 0x7, 0x14000) 18:30:10 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) 18:30:10 executing program 5: mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x12, 0xffffffffffffffff, 0x10000000) fork() 18:30:10 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x30, 0x5, 0x0, 0x7, 0x800, 0x7f, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 18:30:10 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) 18:30:10 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:10 executing program 0: syz_open_dev$sndctrl(0x0, 0x7, 0x14000) 18:30:10 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x12, r0, 0x10000000) fork() 18:30:10 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) 18:30:10 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x30, 0x5, 0x0, 0x7, 0x800, 0x7f, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 18:30:10 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) 18:30:10 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x0, 0x14000) 18:30:10 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x12, r0, 0x10000000) fork() 18:30:10 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:10 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) 18:30:10 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x30, 0x5, 0x0, 0x7, 0x800, 0x7f, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 18:30:10 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000100)={0x0, 0x0, 0x20}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) 18:30:10 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:10 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x30, 0x5, 0x0, 0x7, 0x800, 0x7f, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 18:30:10 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x12, r0, 0x10000000) fork() 18:30:10 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x0, 0x0) 18:30:10 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) 18:30:10 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000100)={0x0, 0x0, 0x20}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 18:30:10 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x30, 0x5, 0x0, 0x7, 0x800, 0x7f, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 18:30:11 executing program 5: r0 = syz_io_uring_setup(0x3f27, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x12, r0, 0x10000000) fork() 18:30:11 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:11 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x0, 0x0) 18:30:11 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) 18:30:11 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x30, 0x5, 0x0, 0x7, 0x800, 0x7f, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 18:30:11 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000100)={0x0, 0x0, 0x20}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 18:30:11 executing program 5: r0 = syz_io_uring_setup(0x3f27, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x12, r0, 0x10000000) fork() 18:30:11 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x0, 0x0) 18:30:11 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) 18:30:11 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:11 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x30, 0x5, 0x0, 0x7, 0x800, 0x7f, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 18:30:11 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000100)={0x0, 0x0, 0x20}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 18:30:11 executing program 5: r0 = syz_io_uring_setup(0x3f27, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x12, r0, 0x10000000) fork() 18:30:11 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) 18:30:11 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:11 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x30, 0x5, 0x0, 0x7, 0x800, 0x7f, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 18:30:11 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:11 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000100)={0x0, 0x0, 0x20}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), 0x0) 18:30:11 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) 18:30:11 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x12, r0, 0x10000000) fork() 18:30:11 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x30, 0x5, 0x0, 0x7, 0x800, 0x7f, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 18:30:11 executing program 0: r0 = syz_io_uring_setup(0x3f27, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x12, r0, 0x10000000) fork() 18:30:11 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:11 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) 18:30:11 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000100)={0x0, 0x0, 0x20}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), 0x0) 18:30:11 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:11 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x12, r0, 0x10000000) fork() 18:30:11 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x30, 0x5, 0x0, 0x7, 0x800, 0x7f, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 18:30:11 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:11 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000100)={0x0, 0x0, 0x20}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), 0x0) 18:30:11 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) 18:30:12 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x12, r0, 0x10000000) fork() 18:30:12 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:12 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x30, 0x5, 0x0, 0x7, 0x800, 0x7f, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 18:30:12 executing program 2: shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) 18:30:12 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) fork() 18:30:12 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:12 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x12, r0, 0x10000000) fork() 18:30:12 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x30, 0x5, 0x0, 0x7, 0x800, 0x7f, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 18:30:12 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x12, r0, 0x10000000) fork() 18:30:12 executing program 2: shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 18:30:12 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00', r0) fork() syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x7, 0x14000) 18:30:12 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x30, 0x5, 0x0, 0x7, 0x800, 0x7f, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 18:30:12 executing program 2: shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 18:30:12 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x12, r0, 0x10000000) fork() 18:30:12 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:12 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x12, r0, 0x10000000) fork() 18:30:12 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x9}, 0x30, 0x5, 0x0, 0x7, 0x800, 0x7f, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 18:30:12 executing program 2: shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 18:30:12 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:12 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x12, r0, 0x10000000) fork() 18:30:12 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x30, 0x5, 0x0, 0x7, 0x800, 0x7f, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 18:30:12 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:12 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:12 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x12, r0, 0x10000000) fork() 18:30:12 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x6e46, &(0x7f0000000100)={0x0, 0xf03f, 0x0, 0x2, 0x3db}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 18:30:13 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r1, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:13 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x30, 0x5, 0x0, 0x7, 0x800, 0x7f, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 18:30:13 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:13 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x10000000) fork() 18:30:13 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) fork() 18:30:13 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000100)=0xfffffff7) 18:30:13 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x0, 0x7, 0x800, 0x7f, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 18:30:13 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r1, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:13 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) fork() 18:30:13 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000100)=0xfffffff7) 18:30:13 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:13 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) fork() 18:30:13 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x800, 0x7f, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 18:30:13 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r1, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:13 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) fork() 18:30:13 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000100)=0xfffffff7) 18:30:13 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) 18:30:13 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) fork() 18:30:13 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000100)=0xfffffff7) 18:30:13 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x800, 0x7f, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 18:30:13 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) 18:30:13 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) fork() 18:30:13 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r1, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:13 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000100)=0xfffffff7) 18:30:13 executing program 0: mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x12, 0xffffffffffffffff, 0x10000000) fork() 18:30:13 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 18:30:14 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) 18:30:14 executing program 5: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000) fork() 18:30:14 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000100)=0xfffffff7) 18:30:14 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r1, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:14 executing program 5: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000) fork() 18:30:14 executing program 0: mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x12, 0xffffffffffffffff, 0x10000000) fork() 18:30:14 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 18:30:14 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) 18:30:14 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000100)=0xfffffff7) 18:30:14 executing program 5: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000) fork() 18:30:14 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r1, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:14 executing program 0: mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x12, 0xffffffffffffffff, 0x10000000) fork() 18:30:14 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 18:30:14 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, 0xffffffffffffffff, 0x0) 18:30:14 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000100)=0xfffffff7) 18:30:14 executing program 5: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) 18:30:14 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:14 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x12, r0, 0x10000000) fork() 18:30:14 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xa) 18:30:14 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000100)=0xfffffff7) 18:30:14 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, 0xffffffffffffffff, 0x0) 18:30:14 executing program 5: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) fork() 18:30:14 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:14 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000100)=0xfffffff7) 18:30:14 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:30:14 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x12, r0, 0x10000000) fork() 18:30:14 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, 0xffffffffffffffff, 0x0) 18:30:15 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000100)=0xfffffff7) 18:30:15 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000540)=0x1, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r1, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r1, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r2, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0xff}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, [], 0x1}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@ip={@local, @private=0xa010101, 0xffffff00, 0xff000000, 'veth1_macvtap\x00', 'ip6gre0\x00', {}, {0xff}, 0x16, 0x1, 0x18}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x6}}, @common=@ttl={{0x28, 'ttl\x00'}, {0x1, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0xf4e, 0x9, [0x32, 0x17, 0x4, 0x9, 0x3b, 0x3d, 0x8, 0x3d, 0x14, 0xb, 0x3, 0x26, 0x6, 0xb, 0x37, 0x4], 0x1, 0x5, 0x4}}}, {{@ip={@loopback, @broadcast, 0xff000000, 0xff000000, 'vlan1\x00', 'ipvlan0\x00', {}, {}, 0x1, 0x1, 0x4}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x0, 0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32=r3, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, r4, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) syz_io_uring_setup(0x2eeb, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r5, 0x8000000) 18:30:15 executing program 5: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x7, 0x2, 0x10000, 0x20, 'syz0\x00', 0x7}, 0x1, [0x5, 0x7, 0x6, 0x200, 0x3, 0x80000000, 0x0, 0x6, 0x462, 0x40, 0x7, 0x6, 0x7, 0x3, 0x16c, 0x101, 0x9, 0xfff, 0x4, 0x100000001, 0x3, 0x20, 0x9c, 0xaed, 0xf58, 0x0, 0x9, 0x5, 0xf56, 0xffffffff, 0x9, 0x5, 0x6, 0xfffffffffffffc00, 0x7, 0x9, 0x100, 0x101, 0x24, 0x5, 0x6, 0xcb, 0xb712, 0x5, 0x5, 0x8, 0x9, 0x86f, 0x8, 0x8, 0xa612, 0x3f, 0x0, 0x6, 0x9831, 0x7, 0x865, 0x8000, 0xd8e70000000, 0x6, 0x1bc7, 0xfba, 0x4, 0xff, 0x69ba, 0xee, 0x9, 0x7fff, 0x5, 0x3, 0x0, 0x2, 0x7, 0x1, 0x8, 0x8, 0x9, 0xffffffff, 0x3ff, 0x1f, 0x5, 0x1635, 0x9, 0x3, 0x10000, 0x3f, 0x4, 0xff, 0x1f, 0x7, 0x7, 0x0, 0x7, 0x5, 0x9, 0x7e, 0x3, 0x5, 0x101, 0x3, 0x9, 0x6, 0x7, 0x7fffffff, 0x8, 0x200, 0xffffffffffffff01, 0xfffffffffffffff7, 0xe61, 0x80000000, 0x9a5, 0x3, 0x4, 0x1, 0x1, 0x8, 0xc23d, 0x1, 0x1f, 0x8001, 0x4, 0xa7ea, 0x10001, 0x4, 0xff, 0xa0d, 0x8, 0x200]}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x12, 0xffffffffffffffff, 0x10000000) 18:30:15 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:15 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x12, r0, 0x10000000) fork() 18:30:15 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) 18:30:15 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000100)=0xfffffff7) 18:30:15 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000540)=0x1, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r1, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r1, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r2, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0xff}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, [], 0x1}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@ip={@local, @private=0xa010101, 0xffffff00, 0xff000000, 'veth1_macvtap\x00', 'ip6gre0\x00', {}, {0xff}, 0x16, 0x1, 0x18}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x6}}, @common=@ttl={{0x28, 'ttl\x00'}, {0x1, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0xf4e, 0x9, [0x32, 0x17, 0x4, 0x9, 0x3b, 0x3d, 0x8, 0x3d, 0x14, 0xb, 0x3, 0x26, 0x6, 0xb, 0x37, 0x4], 0x1, 0x5, 0x4}}}, {{@ip={@loopback, @broadcast, 0xff000000, 0xff000000, 'vlan1\x00', 'ipvlan0\x00', {}, {}, 0x1, 0x1, 0x4}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x0, 0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32=r3, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, r4, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) syz_io_uring_setup(0x2eeb, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r5, 0x8000000) 18:30:15 executing program 5: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00'}) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r1 = syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x43, 0x880c0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000200)={0x59, 0x4, [0x1]}) 18:30:15 executing program 0: r0 = syz_io_uring_setup(0x3f27, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x12, r0, 0x10000000) fork() 18:30:15 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, 0xffffffffffffffff, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r1, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:15 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000100)=0xfffffff7) 18:30:15 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r1, 0x0) 18:30:15 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, 0xffffffffffffffff, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r1, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:15 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000540)=0x1, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r1, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r1, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r2, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0xff}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, [], 0x1}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@ip={@local, @private=0xa010101, 0xffffff00, 0xff000000, 'veth1_macvtap\x00', 'ip6gre0\x00', {}, {0xff}, 0x16, 0x1, 0x18}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x6}}, @common=@ttl={{0x28, 'ttl\x00'}, {0x1, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0xf4e, 0x9, [0x32, 0x17, 0x4, 0x9, 0x3b, 0x3d, 0x8, 0x3d, 0x14, 0xb, 0x3, 0x26, 0x6, 0xb, 0x37, 0x4], 0x1, 0x5, 0x4}}}, {{@ip={@loopback, @broadcast, 0xff000000, 0xff000000, 'vlan1\x00', 'ipvlan0\x00', {}, {}, 0x1, 0x1, 0x4}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x0, 0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32=r3, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, r4, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) syz_io_uring_setup(0x2eeb, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r5, 0x8000000) 18:30:15 executing program 5: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00'}) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r1 = syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x43, 0x880c0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000200)={0x59, 0x4, [0x1]}) 18:30:15 executing program 0: r0 = syz_io_uring_setup(0x3f27, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x12, r0, 0x10000000) fork() 18:30:15 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000100)=0xfffffff7) 18:30:15 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r1, 0x0) 18:30:15 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, 0x0) 18:30:15 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, 0xffffffffffffffff, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r1, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:15 executing program 5: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00'}) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r1 = syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x43, 0x880c0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000200)={0x59, 0x4, [0x1]}) 18:30:15 executing program 0: r0 = syz_io_uring_setup(0x3f27, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x12, r0, 0x10000000) fork() 18:30:15 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r0, 0x0) 18:30:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r0, &(0x7f0000000140), 0x0, 0x0, 0x80000}, 0x4) syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000500), &(0x7f00000000c0)) r1 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000001c0)={{0x9, 0x5, 0x92ad, 0x1, 'syz1\x00'}, 0x5, 0x4, 0x1, r2, 0x3, 0x81, 'syz0\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00', '.##])-,\x00', '/dev/snd/controlC#\x00'], 0x2e, [], [0x8000, 0x1, 0x1ff, 0x7]}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r4, 0x89e2, &(0x7f00000003c0)) r5 = accept4$x25(r4, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r5, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r5, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r6, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xd4, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x3371}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x48014}, 0x4000) 18:30:15 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000540)=0x1, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r1, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r1, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r2, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0xff}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, [], 0x1}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@ip={@local, @private=0xa010101, 0xffffff00, 0xff000000, 'veth1_macvtap\x00', 'ip6gre0\x00', {}, {0xff}, 0x16, 0x1, 0x18}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x6}}, @common=@ttl={{0x28, 'ttl\x00'}, {0x1, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0xf4e, 0x9, [0x32, 0x17, 0x4, 0x9, 0x3b, 0x3d, 0x8, 0x3d, 0x14, 0xb, 0x3, 0x26, 0x6, 0xb, 0x37, 0x4], 0x1, 0x5, 0x4}}}, {{@ip={@loopback, @broadcast, 0xff000000, 0xff000000, 'vlan1\x00', 'ipvlan0\x00', {}, {}, 0x1, 0x1, 0x4}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x0, 0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32=r3, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, r4, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) syz_io_uring_setup(0x2eeb, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, 0x0, 0x0) 18:30:15 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, 0x0) 18:30:16 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:16 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x12, r0, 0x10000000) fork() 18:30:16 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r0, 0x0) 18:30:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r0, &(0x7f0000000140), 0x0, 0x0, 0x80000}, 0x4) syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000500), &(0x7f00000000c0)) r1 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000001c0)={{0x9, 0x5, 0x92ad, 0x1, 'syz1\x00'}, 0x5, 0x4, 0x1, r2, 0x3, 0x81, 'syz0\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00', '.##])-,\x00', '/dev/snd/controlC#\x00'], 0x2e, [], [0x8000, 0x1, 0x1ff, 0x7]}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r4, 0x89e2, &(0x7f00000003c0)) r5 = accept4$x25(r4, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r5, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r5, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r6, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xd4, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x3371}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x48014}, 0x4000) 18:30:16 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, 0x0) 18:30:16 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:16 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000540)=0x1, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r1, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r1, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r2, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0xff}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, [], 0x1}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@ip={@local, @private=0xa010101, 0xffffff00, 0xff000000, 'veth1_macvtap\x00', 'ip6gre0\x00', {}, {0xff}, 0x16, 0x1, 0x18}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x6}}, @common=@ttl={{0x28, 'ttl\x00'}, {0x1, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0xf4e, 0x9, [0x32, 0x17, 0x4, 0x9, 0x3b, 0x3d, 0x8, 0x3d, 0x14, 0xb, 0x3, 0x26, 0x6, 0xb, 0x37, 0x4], 0x1, 0x5, 0x4}}}, {{@ip={@loopback, @broadcast, 0xff000000, 0xff000000, 'vlan1\x00', 'ipvlan0\x00', {}, {}, 0x1, 0x1, 0x4}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x0, 0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32=r3, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, r4, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) syz_io_uring_setup(0x2eeb, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:30:16 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x12, r0, 0x10000000) fork() 18:30:16 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r0, 0x0) 18:30:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r0, &(0x7f0000000140), 0x0, 0x0, 0x80000}, 0x4) syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000500), &(0x7f00000000c0)) r1 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000001c0)={{0x9, 0x5, 0x92ad, 0x1, 'syz1\x00'}, 0x5, 0x4, 0x1, r2, 0x3, 0x81, 'syz0\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00', '.##])-,\x00', '/dev/snd/controlC#\x00'], 0x2e, [], [0x8000, 0x1, 0x1ff, 0x7]}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r4, 0x89e2, &(0x7f00000003c0)) r5 = accept4$x25(r4, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r5, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r5, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r6, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xd4, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x3371}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x48014}, 0x4000) 18:30:16 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:16 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000100)) 18:30:16 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r0, 0x0) 18:30:16 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x12, r0, 0x10000000) fork() 18:30:16 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000540)=0x1, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r1, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r1, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r2, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0xff}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, [], 0x1}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@ip={@local, @private=0xa010101, 0xffffff00, 0xff000000, 'veth1_macvtap\x00', 'ip6gre0\x00', {}, {0xff}, 0x16, 0x1, 0x18}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x6}}, @common=@ttl={{0x28, 'ttl\x00'}, {0x1, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0xf4e, 0x9, [0x32, 0x17, 0x4, 0x9, 0x3b, 0x3d, 0x8, 0x3d, 0x14, 0xb, 0x3, 0x26, 0x6, 0xb, 0x37, 0x4], 0x1, 0x5, 0x4}}}, {{@ip={@loopback, @broadcast, 0xff000000, 0xff000000, 'vlan1\x00', 'ipvlan0\x00', {}, {}, 0x1, 0x1, 0x4}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x0, 0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32=r3, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, r4, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) syz_io_uring_setup(0x2eeb, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:16 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r0, &(0x7f0000000140), 0x0, 0x0, 0x80000}, 0x4) syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000500), &(0x7f00000000c0)) r1 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000001c0)={{0x9, 0x5, 0x92ad, 0x1, 'syz1\x00'}, 0x5, 0x4, 0x1, r2, 0x3, 0x81, 'syz0\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00', '.##])-,\x00', '/dev/snd/controlC#\x00'], 0x2e, [], [0x8000, 0x1, 0x1ff, 0x7]}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r4, 0x89e2, &(0x7f00000003c0)) r5 = accept4$x25(r4, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r5, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r5, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r6, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) 18:30:16 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000100)) 18:30:16 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r0, 0x0) 18:30:16 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x12, r0, 0x10000000) fork() 18:30:16 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:16 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000540)=0x1, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r1, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r1, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r2, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0xff}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, [], 0x1}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@ip={@local, @private=0xa010101, 0xffffff00, 0xff000000, 'veth1_macvtap\x00', 'ip6gre0\x00', {}, {0xff}, 0x16, 0x1, 0x18}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x6}}, @common=@ttl={{0x28, 'ttl\x00'}, {0x1, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0xf4e, 0x9, [0x32, 0x17, 0x4, 0x9, 0x3b, 0x3d, 0x8, 0x3d, 0x14, 0xb, 0x3, 0x26, 0x6, 0xb, 0x37, 0x4], 0x1, 0x5, 0x4}}}, {{@ip={@loopback, @broadcast, 0xff000000, 0xff000000, 'vlan1\x00', 'ipvlan0\x00', {}, {}, 0x1, 0x1, 0x4}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x0, 0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32=r3, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, r4, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) syz_io_uring_setup(0x2eeb, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) 18:30:16 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000540)=0x1, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r1, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r1, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r2, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0xff}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, [], 0x1}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@ip={@local, @private=0xa010101, 0xffffff00, 0xff000000, 'veth1_macvtap\x00', 'ip6gre0\x00', {}, {0xff}, 0x16, 0x1, 0x18}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x6}}, @common=@ttl={{0x28, 'ttl\x00'}, {0x1, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0xf4e, 0x9, [0x32, 0x17, 0x4, 0x9, 0x3b, 0x3d, 0x8, 0x3d, 0x14, 0xb, 0x3, 0x26, 0x6, 0xb, 0x37, 0x4], 0x1, 0x5, 0x4}}}, {{@ip={@loopback, @broadcast, 0xff000000, 0xff000000, 'vlan1\x00', 'ipvlan0\x00', {}, {}, 0x1, 0x1, 0x4}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x0, 0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32=r3, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, r4, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) syz_io_uring_setup(0x2eeb, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r0, &(0x7f0000000140), 0x0, 0x0, 0x80000}, 0x4) syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000500), &(0x7f00000000c0)) r1 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000001c0)={{0x9, 0x5, 0x92ad, 0x1, 'syz1\x00'}, 0x5, 0x4, 0x1, r2, 0x3, 0x81, 'syz0\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00', '.##])-,\x00', '/dev/snd/controlC#\x00'], 0x2e, [], [0x8000, 0x1, 0x1ff, 0x7]}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r4, 0x89e2, &(0x7f00000003c0)) r5 = accept4$x25(r4, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r5, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r5, &(0x7f000000fdc0)=@xdp, &(0x7f000000fe40)=0x80) 18:30:16 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r0, 0x0) 18:30:16 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x12, r0, 0x10000000) fork() 18:30:17 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:17 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000540)=0x1, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r1, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r1, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r2, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0xff}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, [], 0x1}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@ip={@local, @private=0xa010101, 0xffffff00, 0xff000000, 'veth1_macvtap\x00', 'ip6gre0\x00', {}, {0xff}, 0x16, 0x1, 0x18}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x6}}, @common=@ttl={{0x28, 'ttl\x00'}, {0x1, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0xf4e, 0x9, [0x32, 0x17, 0x4, 0x9, 0x3b, 0x3d, 0x8, 0x3d, 0x14, 0xb, 0x3, 0x26, 0x6, 0xb, 0x37, 0x4], 0x1, 0x5, 0x4}}}, {{@ip={@loopback, @broadcast, 0xff000000, 0xff000000, 'vlan1\x00', 'ipvlan0\x00', {}, {}, 0x1, 0x1, 0x4}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x0, 0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32=r3, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, r4, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) syz_io_uring_setup(0x2eeb, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r0, &(0x7f0000000140), 0x0, 0x0, 0x80000}, 0x4) syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000500), &(0x7f00000000c0)) r1 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000001c0)={{0x9, 0x5, 0x92ad, 0x1, 'syz1\x00'}, 0x5, 0x4, 0x1, r2, 0x3, 0x81, 'syz0\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00', '.##])-,\x00', '/dev/snd/controlC#\x00'], 0x2e, [], [0x8000, 0x1, 0x1ff, 0x7]}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r4, 0x89e2, &(0x7f00000003c0)) r5 = accept4$x25(r4, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r5, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) 18:30:17 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2010, r0, 0x0) 18:30:17 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x12, r0, 0x10000000) fork() 18:30:17 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000540)=0x1, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r1, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r1, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r2, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0xff}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, [], 0x1}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@ip={@local, @private=0xa010101, 0xffffff00, 0xff000000, 'veth1_macvtap\x00', 'ip6gre0\x00', {}, {0xff}, 0x16, 0x1, 0x18}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x6}}, @common=@ttl={{0x28, 'ttl\x00'}, {0x1, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0xf4e, 0x9, [0x32, 0x17, 0x4, 0x9, 0x3b, 0x3d, 0x8, 0x3d, 0x14, 0xb, 0x3, 0x26, 0x6, 0xb, 0x37, 0x4], 0x1, 0x5, 0x4}}}, {{@ip={@loopback, @broadcast, 0xff000000, 0xff000000, 'vlan1\x00', 'ipvlan0\x00', {}, {}, 0x1, 0x1, 0x4}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x0, 0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32=r3, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, r4, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) syz_io_uring_setup(0x2eeb, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) 18:30:17 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) 18:30:17 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000540)=0x1, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r1, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r1, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r2, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0xff}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, [], 0x1}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@ip={@local, @private=0xa010101, 0xffffff00, 0xff000000, 'veth1_macvtap\x00', 'ip6gre0\x00', {}, {0xff}, 0x16, 0x1, 0x18}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x6}}, @common=@ttl={{0x28, 'ttl\x00'}, {0x1, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0xf4e, 0x9, [0x32, 0x17, 0x4, 0x9, 0x3b, 0x3d, 0x8, 0x3d, 0x14, 0xb, 0x3, 0x26, 0x6, 0xb, 0x37, 0x4], 0x1, 0x5, 0x4}}}, {{@ip={@loopback, @broadcast, 0xff000000, 0xff000000, 'vlan1\x00', 'ipvlan0\x00', {}, {}, 0x1, 0x1, 0x4}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x0, 0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32=r3, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, r4, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) syz_io_uring_setup(0x2eeb, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:17 executing program 3: syz_io_uring_setup(0x3f27, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r0, &(0x7f0000000140), 0x0, 0x0, 0x80000}, 0x4) syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000500), &(0x7f00000000c0)) r1 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000001c0)={{0x9, 0x5, 0x92ad, 0x1, 'syz1\x00'}, 0x5, 0x4, 0x1, r2, 0x3, 0x81, 'syz0\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00', '.##])-,\x00', '/dev/snd/controlC#\x00'], 0x2e, [], [0x8000, 0x1, 0x1ff, 0x7]}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r4, 0x89e2, &(0x7f00000003c0)) accept4$x25(r4, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) 18:30:17 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000540)=0x1, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r1, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r1, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r2, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0xff}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, [], 0x1}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@ip={@local, @private=0xa010101, 0xffffff00, 0xff000000, 'veth1_macvtap\x00', 'ip6gre0\x00', {}, {0xff}, 0x16, 0x1, 0x18}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x6}}, @common=@ttl={{0x28, 'ttl\x00'}, {0x1, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0xf4e, 0x9, [0x32, 0x17, 0x4, 0x9, 0x3b, 0x3d, 0x8, 0x3d, 0x14, 0xb, 0x3, 0x26, 0x6, 0xb, 0x37, 0x4], 0x1, 0x5, 0x4}}}, {{@ip={@loopback, @broadcast, 0xff000000, 0xff000000, 'vlan1\x00', 'ipvlan0\x00', {}, {}, 0x1, 0x1, 0x4}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x0, 0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32=r3, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, r4, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:17 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x10000000) fork() 18:30:17 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) 18:30:17 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000540)=0x1, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r1, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r1, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r2, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0xff}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, [], 0x1}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@ip={@local, @private=0xa010101, 0xffffff00, 0xff000000, 'veth1_macvtap\x00', 'ip6gre0\x00', {}, {0xff}, 0x16, 0x1, 0x18}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x6}}, @common=@ttl={{0x28, 'ttl\x00'}, {0x1, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0xf4e, 0x9, [0x32, 0x17, 0x4, 0x9, 0x3b, 0x3d, 0x8, 0x3d, 0x14, 0xb, 0x3, 0x26, 0x6, 0xb, 0x37, 0x4], 0x1, 0x5, 0x4}}}, {{@ip={@loopback, @broadcast, 0xff000000, 0xff000000, 'vlan1\x00', 'ipvlan0\x00', {}, {}, 0x1, 0x1, 0x4}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x0, 0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32=r3, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, r4, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) syz_io_uring_setup(0x2eeb, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) 18:30:17 executing program 3: syz_io_uring_setup(0x3f27, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:17 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000540)=0x1, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r1, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r1, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r2, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0xff}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, [], 0x1}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@ip={@local, @private=0xa010101, 0xffffff00, 0xff000000, 'veth1_macvtap\x00', 'ip6gre0\x00', {}, {0xff}, 0x16, 0x1, 0x18}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x6}}, @common=@ttl={{0x28, 'ttl\x00'}, {0x1, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0xf4e, 0x9, [0x32, 0x17, 0x4, 0x9, 0x3b, 0x3d, 0x8, 0x3d, 0x14, 0xb, 0x3, 0x26, 0x6, 0xb, 0x37, 0x4], 0x1, 0x5, 0x4}}}, {{@ip={@loopback, @broadcast, 0xff000000, 0xff000000, 'vlan1\x00', 'ipvlan0\x00', {}, {}, 0x1, 0x1, 0x4}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x0, 0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32=r3, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, r4, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r0, &(0x7f0000000140), 0x0, 0x0, 0x80000}, 0x4) syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000500), &(0x7f00000000c0)) r1 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000001c0)={{0x9, 0x5, 0x92ad, 0x1, 'syz1\x00'}, 0x5, 0x4, 0x1, r2, 0x3, 0x81, 'syz0\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00', '.##])-,\x00', '/dev/snd/controlC#\x00'], 0x2e, [], [0x8000, 0x1, 0x1ff, 0x7]}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r4, 0x89e2, &(0x7f00000003c0)) 18:30:17 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) 18:30:17 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) fork() 18:30:17 executing program 3: syz_io_uring_setup(0x3f27, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:17 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000540)=0x1, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r1, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r1, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r2, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0xff}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, [], 0x1}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@ip={@local, @private=0xa010101, 0xffffff00, 0xff000000, 'veth1_macvtap\x00', 'ip6gre0\x00', {}, {0xff}, 0x16, 0x1, 0x18}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x6}}, @common=@ttl={{0x28, 'ttl\x00'}, {0x1, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0xf4e, 0x9, [0x32, 0x17, 0x4, 0x9, 0x3b, 0x3d, 0x8, 0x3d, 0x14, 0xb, 0x3, 0x26, 0x6, 0xb, 0x37, 0x4], 0x1, 0x5, 0x4}}}, {{@ip={@loopback, @broadcast, 0xff000000, 0xff000000, 'vlan1\x00', 'ipvlan0\x00', {}, {}, 0x1, 0x1, 0x4}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x0, 0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32=r3, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, r4, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) syz_io_uring_setup(0x2eeb, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) 18:30:17 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000540)=0x1, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r1, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r1, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r2, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0xff}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, [], 0x1}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@ip={@local, @private=0xa010101, 0xffffff00, 0xff000000, 'veth1_macvtap\x00', 'ip6gre0\x00', {}, {0xff}, 0x16, 0x1, 0x18}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x6}}, @common=@ttl={{0x28, 'ttl\x00'}, {0x1, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0xf4e, 0x9, [0x32, 0x17, 0x4, 0x9, 0x3b, 0x3d, 0x8, 0x3d, 0x14, 0xb, 0x3, 0x26, 0x6, 0xb, 0x37, 0x4], 0x1, 0x5, 0x4}}}, {{@ip={@loopback, @broadcast, 0xff000000, 0xff000000, 'vlan1\x00', 'ipvlan0\x00', {}, {}, 0x1, 0x1, 0x4}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x0, 0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32=r3, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:17 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) fork() 18:30:17 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:17 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) 18:30:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r0, &(0x7f0000000140), 0x0, 0x0, 0x80000}, 0x4) syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000500), &(0x7f00000000c0)) r1 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000001c0)={{0x9, 0x5, 0x92ad, 0x1, 'syz1\x00'}, 0x5, 0x4, 0x1, r2, 0x3, 0x81, 'syz0\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00', '.##])-,\x00', '/dev/snd/controlC#\x00'], 0x2e, [], [0x8000, 0x1, 0x1ff, 0x7]}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 18:30:17 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) 18:30:18 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000540)=0x1, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r1, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r1, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r2, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0xff}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, [], 0x1}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@ip={@local, @private=0xa010101, 0xffffff00, 0xff000000, 'veth1_macvtap\x00', 'ip6gre0\x00', {}, {0xff}, 0x16, 0x1, 0x18}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x6}}, @common=@ttl={{0x28, 'ttl\x00'}, {0x1, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0xf4e, 0x9, [0x32, 0x17, 0x4, 0x9, 0x3b, 0x3d, 0x8, 0x3d, 0x14, 0xb, 0x3, 0x26, 0x6, 0xb, 0x37, 0x4], 0x1, 0x5, 0x4}}}, {{@ip={@loopback, @broadcast, 0xff000000, 0xff000000, 'vlan1\x00', 'ipvlan0\x00', {}, {}, 0x1, 0x1, 0x4}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x0, 0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:18 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:18 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000540)=0x1, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r1, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r1, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r2, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0xff}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, [], 0x1}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@ip={@local, @private=0xa010101, 0xffffff00, 0xff000000, 'veth1_macvtap\x00', 'ip6gre0\x00', {}, {0xff}, 0x16, 0x1, 0x18}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x6}}, @common=@ttl={{0x28, 'ttl\x00'}, {0x1, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0xf4e, 0x9, [0x32, 0x17, 0x4, 0x9, 0x3b, 0x3d, 0x8, 0x3d, 0x14, 0xb, 0x3, 0x26, 0x6, 0xb, 0x37, 0x4], 0x1, 0x5, 0x4}}}, {{@ip={@loopback, @broadcast, 0xff000000, 0xff000000, 'vlan1\x00', 'ipvlan0\x00', {}, {}, 0x1, 0x1, 0x4}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x0, 0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32=r3, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, r4, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:18 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) fork() 18:30:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r0, &(0x7f0000000140), 0x0, 0x0, 0x80000}, 0x4) syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000500), &(0x7f00000000c0)) r1 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000001c0)={{0x9, 0x5, 0x92ad, 0x1, 'syz1\x00'}, 0x5, 0x4, 0x1, r2, 0x3, 0x81, 'syz0\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00', '.##])-,\x00', '/dev/snd/controlC#\x00'], 0x2e, [], [0x8000, 0x1, 0x1ff, 0x7]}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) 18:30:18 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:18 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) 18:30:18 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000540)=0x1, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r1, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r1, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r2, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0xff}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, [], 0x1}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@ip={@local, @private=0xa010101, 0xffffff00, 0xff000000, 'veth1_macvtap\x00', 'ip6gre0\x00', {}, {0xff}, 0x16, 0x1, 0x18}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x6}}, @common=@ttl={{0x28, 'ttl\x00'}, {0x1, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0xf4e, 0x9, [0x32, 0x17, 0x4, 0x9, 0x3b, 0x3d, 0x8, 0x3d, 0x14, 0xb, 0x3, 0x26, 0x6, 0xb, 0x37, 0x4], 0x1, 0x5, 0x4}}}, {{@ip={@loopback, @broadcast, 0xff000000, 0xff000000, 'vlan1\x00', 'ipvlan0\x00', {}, {}, 0x1, 0x1, 0x4}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x0, 0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:18 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000540)=0x1, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r1, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r1, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r2, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0xff}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, [], 0x1}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@ip={@local, @private=0xa010101, 0xffffff00, 0xff000000, 'veth1_macvtap\x00', 'ip6gre0\x00', {}, {0xff}, 0x16, 0x1, 0x18}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x6}}, @common=@ttl={{0x28, 'ttl\x00'}, {0x1, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0xf4e, 0x9, [0x32, 0x17, 0x4, 0x9, 0x3b, 0x3d, 0x8, 0x3d, 0x14, 0xb, 0x3, 0x26, 0x6, 0xb, 0x37, 0x4], 0x1, 0x5, 0x4}}}, {{@ip={@loopback, @broadcast, 0xff000000, 0xff000000, 'vlan1\x00', 'ipvlan0\x00', {}, {}, 0x1, 0x1, 0x4}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x0, 0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32=r3, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, r4, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:18 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000) fork() 18:30:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r0, &(0x7f0000000140), 0x0, 0x0, 0x80000}, 0x4) syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000500), &(0x7f00000000c0)) r1 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000001c0)={{0x9, 0x5, 0x92ad, 0x1, 'syz1\x00'}, 0x5, 0x4, 0x1, r2, 0x3, 0x81, 'syz0\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00', '.##])-,\x00', '/dev/snd/controlC#\x00'], 0x2e, [], [0x8000, 0x1, 0x1ff, 0x7]}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:30:18 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:18 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, 0x0) 18:30:18 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000540)=0x1, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r1, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r1, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r2, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0xff}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, [], 0x1}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@ip={@local, @private=0xa010101, 0xffffff00, 0xff000000, 'veth1_macvtap\x00', 'ip6gre0\x00', {}, {0xff}, 0x16, 0x1, 0x18}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x6}}, @common=@ttl={{0x28, 'ttl\x00'}, {0x1, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0xf4e, 0x9, [0x32, 0x17, 0x4, 0x9, 0x3b, 0x3d, 0x8, 0x3d, 0x14, 0xb, 0x3, 0x26, 0x6, 0xb, 0x37, 0x4], 0x1, 0x5, 0x4}}}, {{@ip={@loopback, @broadcast, 0xff000000, 0xff000000, 'vlan1\x00', 'ipvlan0\x00', {}, {}, 0x1, 0x1, 0x4}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x0, 0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32=r3, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:18 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000540)=0x1, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r1, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r1, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r2, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0xff}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, [], 0x1}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:18 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000) fork() 18:30:18 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, 0x0) 18:30:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r0, &(0x7f0000000140), 0x0, 0x0, 0x80000}, 0x4) syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000500), &(0x7f00000000c0)) r1 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000001c0)={{0x9, 0x5, 0x92ad, 0x1, 'syz1\x00'}, 0x5, 0x4, 0x1, r2, 0x3, 0x81, 'syz0\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00', '.##])-,\x00', '/dev/snd/controlC#\x00'], 0x2e, [], [0x8000, 0x1, 0x1ff, 0x7]}) 18:30:18 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000) fork() 18:30:18 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:18 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000540)=0x1, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r1, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r1, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r2, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0xff}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, [], 0x1}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@ip={@local, @private=0xa010101, 0xffffff00, 0xff000000, 'veth1_macvtap\x00', 'ip6gre0\x00', {}, {0xff}, 0x16, 0x1, 0x18}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x6}}, @common=@ttl={{0x28, 'ttl\x00'}, {0x1, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0xf4e, 0x9, [0x32, 0x17, 0x4, 0x9, 0x3b, 0x3d, 0x8, 0x3d, 0x14, 0xb, 0x3, 0x26, 0x6, 0xb, 0x37, 0x4], 0x1, 0x5, 0x4}}}, {{@ip={@loopback, @broadcast, 0xff000000, 0xff000000, 'vlan1\x00', 'ipvlan0\x00', {}, {}, 0x1, 0x1, 0x4}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x0, 0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:18 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000540)=0x1, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r1, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r1, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r2, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r0, &(0x7f0000000140), 0x0, 0x0, 0x80000}, 0x4) syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000500), &(0x7f00000000c0)) r1 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000001c0)={{0x9, 0x5, 0x92ad, 0x1, 'syz1\x00'}, 0x5, 0x4, 0x1, 0x0, 0x3, 0x81, 'syz0\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00', '.##])-,\x00', '/dev/snd/controlC#\x00'], 0x2e, [], [0x8000, 0x1, 0x1ff, 0x7]}) 18:30:18 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, 0x0) 18:30:18 executing program 0: r0 = syz_io_uring_setup(0x3f22, &(0x7f0000000000)={0x0, 0xffffffff, 0x2, 0x0, 0xfffffffe}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000001c0), &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r0, 0x8000000) r1 = fork() msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000100)=""/113) r2 = msgget$private(0x0, 0x4db) r3 = getegid() r4 = getegid() msgctl$IPC_SET(r2, 0x1, &(0x7f0000000200)={{0x2, 0xffffffffffffffff, r3, 0x0, r4, 0x2, 0xfff}, 0x0, 0x0, 0xb390, 0x8, 0x100, 0x0, 0x20200000, 0x2, 0x34, 0x1f, 0x0, r1}) 18:30:18 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000540)=0x1, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r1, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r1, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r2, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0xff}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, [], 0x1}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@ip={@local, @private=0xa010101, 0xffffff00, 0xff000000, 'veth1_macvtap\x00', 'ip6gre0\x00', {}, {0xff}, 0x16, 0x1, 0x18}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x6}}, @common=@ttl={{0x28, 'ttl\x00'}, {0x1, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0xf4e, 0x9, [0x32, 0x17, 0x4, 0x9, 0x3b, 0x3d, 0x8, 0x3d, 0x14, 0xb, 0x3, 0x26, 0x6, 0xb, 0x37, 0x4], 0x1, 0x5, 0x4}}}, {{@ip={@loopback, @broadcast, 0xff000000, 0xff000000, 'vlan1\x00', 'ipvlan0\x00', {}, {}, 0x1, 0x1, 0x4}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x0, 0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:18 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:18 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000540)=0x1, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r1, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r1, &(0x7f000000fdc0)=@xdp, &(0x7f000000fe40)=0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:18 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, 0x0) 18:30:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r0, &(0x7f0000000140), 0x0, 0x0, 0x80000}, 0x4) syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000500), &(0x7f00000000c0)) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f00000001c0)={{0x9, 0x5, 0x92ad, 0x1, 'syz1\x00'}, 0x5, 0x4, 0x1, 0x0, 0x3, 0x81, 'syz0\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00', '.##])-,\x00', '/dev/snd/controlC#\x00'], 0x2e, [], [0x8000, 0x1, 0x1ff, 0x7]}) 18:30:19 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000540)=0x1, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r1, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r1, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r2, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0xff}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, [], 0x1}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:19 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000540)=0x1, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r1, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:19 executing program 0: r0 = syz_io_uring_setup(0x3f22, &(0x7f0000000000)={0x0, 0xffffffff, 0x2, 0x0, 0xfffffffe}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000001c0), &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r0, 0x8000000) r1 = fork() msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000100)=""/113) r2 = msgget$private(0x0, 0x4db) r3 = getegid() r4 = getegid() msgctl$IPC_SET(r2, 0x1, &(0x7f0000000200)={{0x2, 0xffffffffffffffff, r3, 0x0, r4, 0x2, 0xfff}, 0x0, 0x0, 0xb390, 0x8, 0x100, 0x0, 0x20200000, 0x2, 0x34, 0x1f, 0x0, r1}) 18:30:19 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:19 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, 0x0) 18:30:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r0, &(0x7f0000000140), 0x0, 0x0, 0x80000}, 0x4) syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000500), &(0x7f00000000c0)) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f00000001c0)={{0x9, 0x5, 0x92ad, 0x1, 'syz1\x00'}, 0x5, 0x4, 0x1, 0x0, 0x3, 0x81, 'syz0\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00', '.##])-,\x00', '/dev/snd/controlC#\x00'], 0x2e, [], [0x8000, 0x1, 0x1ff, 0x7]}) 18:30:19 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000540)=0x1, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r1, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r1, &(0x7f000000fdc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000fe40)=0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f000000fe80)={0x1d, r2, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:19 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:19 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000540)=0x1, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:19 executing program 2: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, 0x0) 18:30:19 executing program 0: r0 = syz_io_uring_setup(0x3f22, &(0x7f0000000000)={0x0, 0xffffffff, 0x2, 0x0, 0xfffffffe}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000001c0), &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r0, 0x8000000) r1 = fork() msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000100)=""/113) r2 = msgget$private(0x0, 0x4db) r3 = getegid() r4 = getegid() msgctl$IPC_SET(r2, 0x1, &(0x7f0000000200)={{0x2, 0xffffffffffffffff, r3, 0x0, r4, 0x2, 0xfff}, 0x0, 0x0, 0xb390, 0x8, 0x100, 0x0, 0x20200000, 0x2, 0x34, 0x1f, 0x0, r1}) 18:30:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r0, &(0x7f0000000140), 0x0, 0x0, 0x80000}, 0x4) syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000500), &(0x7f00000000c0)) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f00000001c0)={{0x9, 0x5, 0x92ad, 0x1, 'syz1\x00'}, 0x5, 0x4, 0x1, 0x0, 0x3, 0x81, 'syz0\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00', '.##])-,\x00', '/dev/snd/controlC#\x00'], 0x2e, [], [0x8000, 0x1, 0x1ff, 0x7]}) 18:30:19 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000540)=0x1, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r1, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r1, &(0x7f000000fdc0)=@xdp, &(0x7f000000fe40)=0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:19 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000540)=0x1, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:19 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, 0x0) 18:30:19 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:19 executing program 0: r0 = syz_io_uring_setup(0x3f22, &(0x7f0000000000)={0x0, 0xffffffff, 0x2, 0x0, 0xfffffffe}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000001c0), &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r0, 0x8000000) r1 = fork() msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000100)=""/113) r2 = msgget$private(0x0, 0x4db) r3 = getegid() msgctl$IPC_SET(r2, 0x1, &(0x7f0000000200)={{0x2, 0xffffffffffffffff, r3, 0x0, 0x0, 0x2, 0xfff}, 0x0, 0x0, 0xb390, 0x8, 0x100, 0x0, 0x20200000, 0x2, 0x34, 0x1f, 0x0, r1}) 18:30:19 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000540)=0x1, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r1, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r0, &(0x7f0000000140), 0x0, 0x0, 0x80000}, 0x4) r1 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000001c0)={{0x9, 0x5, 0x92ad, 0x1, 'syz1\x00'}, 0x5, 0x4, 0x1, 0x0, 0x3, 0x81, 'syz0\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00', '.##])-,\x00', '/dev/snd/controlC#\x00'], 0x2e, [], [0x8000, 0x1, 0x1ff, 0x7]}) 18:30:19 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000540)=0x1, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:19 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, 0x0) 18:30:19 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:19 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000540)=0x1, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:19 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f00000001c0)={{0x9, 0x5, 0x92ad, 0x1, 'syz1\x00'}, 0x5, 0x4, 0x1, 0x0, 0x3, 0x81, 'syz0\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00', '.##])-,\x00', '/dev/snd/controlC#\x00'], 0x2e, [], [0x8000, 0x1, 0x1ff, 0x7]}) 18:30:19 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:19 executing program 0: r0 = syz_io_uring_setup(0x3f22, &(0x7f0000000000)={0x0, 0xffffffff, 0x2, 0x0, 0xfffffffe}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000001c0), &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r0, 0x8000000) r1 = fork() msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000100)=""/113) r2 = msgget$private(0x0, 0x4db) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000200)={{0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, 0xfff}, 0x0, 0x0, 0xb390, 0x8, 0x100, 0x0, 0x20200000, 0x2, 0x34, 0x1f, 0x0, r1}) 18:30:19 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, 0x0) 18:30:19 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:19 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000540)=0x1, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:19 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f00000001c0)={{0x9, 0x5, 0x92ad, 0x1, 'syz1\x00'}, 0x5, 0x4, 0x1, 0x0, 0x3, 0x81, 'syz0\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00', '.##])-,\x00', '/dev/snd/controlC#\x00'], 0x2e, [], [0x8000, 0x1, 0x1ff, 0x7]}) 18:30:20 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:20 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, 0x0) 18:30:20 executing program 0: r0 = syz_io_uring_setup(0x3f22, &(0x7f0000000000)={0x0, 0xffffffff, 0x2, 0x0, 0xfffffffe}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000001c0), &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r0, 0x8000000) r1 = fork() msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000100)=""/113) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000200)={{0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, 0xfff}, 0x0, 0x0, 0xb390, 0x8, 0x100, 0x0, 0x20200000, 0x2, 0x34, 0x1f, 0x0, r1}) 18:30:20 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 18:30:20 executing program 5: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f00000001c0)={{0x9, 0x5, 0x92ad, 0x1, 'syz1\x00'}, 0x5, 0x4, 0x1, 0x0, 0x3, 0x81, 'syz0\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00', '.##])-,\x00', '/dev/snd/controlC#\x00'], 0x2e, [], [0x8000, 0x1, 0x1ff, 0x7]}) 18:30:20 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:20 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000540)=0x1, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:20 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, 0x0) 18:30:20 executing program 0: r0 = syz_io_uring_setup(0x3f22, &(0x7f0000000000)={0x0, 0xffffffff, 0x2, 0x0, 0xfffffffe}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000001c0), &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r0, 0x8000000) r1 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000200)={{0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, 0xfff}, 0x0, 0x0, 0xb390, 0x8, 0x100, 0x0, 0x20200000, 0x2, 0x34, 0x1f, 0x0, r1}) 18:30:20 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, 0x0) 18:30:20 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 18:30:20 executing program 5: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f00000001c0)={{0x9, 0x5, 0x92ad, 0x1, 'syz1\x00'}, 0x5, 0x4, 0x1, 0x0, 0x3, 0x81, 'syz0\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00', '.##])-,\x00', '/dev/snd/controlC#\x00'], 0x2e, [], [0x8000, 0x1, 0x1ff, 0x7]}) 18:30:20 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:20 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:20 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:20 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 18:30:20 executing program 0: r0 = syz_io_uring_setup(0x3f22, &(0x7f0000000000)={0x0, 0xffffffff, 0x2, 0x0, 0xfffffffe}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000001c0), &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r0, 0x8000000) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000200)={{0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, 0xfff}, 0x0, 0x0, 0xb390, 0x8, 0x100, 0x0, 0x20200000, 0x2, 0x34, 0x1f}) 18:30:20 executing program 5: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f00000001c0)={{0x9, 0x5, 0x92ad, 0x1, 'syz1\x00'}, 0x5, 0x4, 0x1, 0x0, 0x3, 0x81, 'syz0\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00', '.##])-,\x00', '/dev/snd/controlC#\x00'], 0x2e, [], [0x8000, 0x1, 0x1ff, 0x7]}) 18:30:20 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:20 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, 0x0, &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:20 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:20 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000540)=0x1, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r1, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r1, &(0x7f000000fdc0)=@xdp, &(0x7f000000fe40)=0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:20 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f00000001c0)={{0x9, 0x5, 0x92ad, 0x1, 'syz1\x00'}, 0x5, 0x4, 0x1, 0x0, 0x3, 0x81, 'syz0\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00', '.##])-,\x00', '/dev/snd/controlC#\x00'], 0x2e, [], [0x8000, 0x1, 0x1ff, 0x7]}) 18:30:20 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:20 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 18:30:20 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, 0x0, &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:20 executing program 0: syz_io_uring_setup(0x3f22, &(0x7f0000000000)={0x0, 0xffffffff, 0x2, 0x0, 0xfffffffe}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000001c0), &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000200)={{0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, 0xfff}, 0x0, 0x0, 0xb390, 0x8, 0x100, 0x0, 0x20200000, 0x2, 0x34, 0x1f}) 18:30:20 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f00000001c0)={{0x9, 0x5, 0x92ad, 0x1, 'syz1\x00'}, 0x5, 0x4, 0x1, 0x0, 0x3, 0x81, 'syz0\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00', '.##])-,\x00', '/dev/snd/controlC#\x00'], 0x2e, [], [0x8000, 0x1, 0x1ff, 0x7]}) 18:30:20 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000540)=0x1, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r1, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r1, &(0x7f000000fdc0)=@xdp, &(0x7f000000fe40)=0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:21 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, 0x0, &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:21 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r1, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:21 executing program 0: syz_io_uring_setup(0x3f22, &(0x7f0000000000)={0x0, 0xffffffff, 0x2, 0x0, 0xfffffffe}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000001c0), &(0x7f00000000c0)) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000200)={{0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, 0xfff}, 0x0, 0x0, 0xb390, 0x8, 0x100, 0x0, 0x20200000, 0x2, 0x34, 0x1f}) 18:30:21 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 18:30:21 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f00000001c0)={{0x9, 0x5, 0x92ad, 0x1, 'syz1\x00'}, 0x5, 0x4, 0x1, 0x0, 0x3, 0x81, 'syz0\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00', '.##])-,\x00', '/dev/snd/controlC#\x00'], 0x2e, [], [0x8000, 0x1, 0x1ff, 0x7]}) 18:30:21 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000540)=0x1, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r1, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) getpeername(r1, &(0x7f000000fdc0)=@xdp, &(0x7f000000fe40)=0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:21 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 18:30:21 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:21 executing program 0: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000200)={{0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, 0xfff}, 0x0, 0x0, 0xb390, 0x8, 0x100, 0x0, 0x20200000, 0x2, 0x34, 0x1f}) 18:30:21 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, 0x0) 18:30:21 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r1, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:21 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000540)=0x1, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) recvfrom$x25(r1, &(0x7f0000000480)=""/61, 0x3d, 0x20000040, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:21 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, 0x0, &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:21 executing program 0: msgctl$IPC_SET(0x0, 0x1, 0x0) 18:30:21 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, 0x0) 18:30:21 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:21 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000540)=0x1, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x100800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:21 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, 0x0, &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:21 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r1, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:21 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, 0x0) 18:30:21 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:21 executing program 0: msgctl$IPC_SET(0x0, 0x1, 0x0) 18:30:21 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000540)=0x1, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:21 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, 0x0, &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:21 executing program 0: msgctl$IPC_SET(0x0, 0x1, 0x0) 18:30:21 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, 0x0, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:21 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[], 0x0, 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:21 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000540)=0x1, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:21 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f00000001c0)={{0x0, 0x5, 0x92ad, 0x1, 'syz1\x00'}, 0x5, 0x4, 0x1, 0x0, 0x3, 0x81, 'syz0\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00', '.##])-,\x00', '/dev/snd/controlC#\x00'], 0x2e, [], [0x8000, 0x1, 0x1ff, 0x7]}) 18:30:21 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:21 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:21 executing program 0: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000200)={{0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xb390, 0x8, 0x100, 0x0, 0x20200000, 0x2, 0x34, 0x1f}) 18:30:21 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[], 0x0, 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:21 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, 0x0, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:21 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:21 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f00000001c0)={{0x0, 0x0, 0x92ad, 0x1, 'syz1\x00'}, 0x5, 0x4, 0x1, 0x0, 0x3, 0x81, 'syz0\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00', '.##])-,\x00', '/dev/snd/controlC#\x00'], 0x2e, [], [0x8000, 0x1, 0x1ff, 0x7]}) 18:30:22 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:22 executing program 0: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000200)={{0x2, 0xffffffffffffffff}, 0x0, 0x0, 0xb390, 0x8, 0x100, 0x0, 0x20200000, 0x2, 0x34, 0x1f}) 18:30:22 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[], 0x0, 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:22 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, 0x0, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:22 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x1, 'syz1\x00'}, 0x5, 0x4, 0x1, 0x0, 0x3, 0x81, 'syz0\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00', '.##])-,\x00', '/dev/snd/controlC#\x00'], 0x2e, [], [0x8000, 0x1, 0x1ff, 0x7]}) 18:30:22 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 18:30:22 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:22 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:22 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 18:30:22 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x5, 0x4, 0x1, 0x0, 0x3, 0x81, 'syz0\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00', '.##])-,\x00', '/dev/snd/controlC#\x00'], 0x2e, [], [0x8000, 0x1, 0x1ff, 0x7]}) 18:30:22 executing program 0: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000200)={{0x2, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x8, 0x100, 0x0, 0x20200000, 0x2, 0x34, 0x1f}) 18:30:22 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:22 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:22 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[], 0x0, 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:22 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 18:30:22 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:22 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x4, 0x1, 0x0, 0x3, 0x81, 'syz0\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00', '.##])-,\x00', '/dev/snd/controlC#\x00'], 0x2e, [], [0x8000, 0x1, 0x1ff, 0x7]}) 18:30:22 executing program 0: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000200)={{0x2, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x20200000, 0x2, 0x34, 0x1f}) 18:30:22 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[], 0x0, 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:22 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, 0x0, &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:22 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:22 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:22 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, 0x0, &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:22 executing program 0: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000200)={{0x2, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20200000, 0x2, 0x34, 0x1f}) 18:30:22 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x81, 'syz0\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00', '.##])-,\x00', '/dev/snd/controlC#\x00'], 0x2e, [], [0x8000, 0x1, 0x1ff, 0x7]}) 18:30:22 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:30:22 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[], 0x0, 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:22 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, 0x0, &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:22 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 'syz0\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00', '.##])-,\x00', '/dev/snd/controlC#\x00'], 0x2e, [], [0x8000, 0x1, 0x1ff, 0x7]}) 18:30:22 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:22 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:22 executing program 0: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000200)={{0x2, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x34, 0x1f}) 18:30:22 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:22 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:22 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 'syz0\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00', '.##])-,\x00', '/dev/snd/controlC#\x00'], 0x2e, [], [0x8000, 0x1, 0x1ff, 0x7]}) 18:30:22 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:22 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:22 executing program 0: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000200)={{0x2, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x1f}) 18:30:22 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:22 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:23 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:23 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, [], [0x8000, 0x1, 0x1ff, 0x7]}) 18:30:23 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:23 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:23 executing program 0: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000200)={{0x2, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) 18:30:23 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, [], [0x8000, 0x1, 0x1ff]}) 18:30:23 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:23 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[], 0x0, 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:23 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:23 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 18:30:23 executing program 0: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000200)={{0x2, 0xffffffffffffffff}}) 18:30:23 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, [], [0x8000, 0x1]}) 18:30:23 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[], 0x0, 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:23 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:30:23 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:23 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 18:30:23 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, [], [0x8000]}) 18:30:23 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:23 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[], 0x0, 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:23 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, 0x0, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:23 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 18:30:23 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 18:30:23 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:23 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:23 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000540)=0x1, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000018160000", @ANYRES32, @ANYBLOB="00000000000000009500007a60060000000000"], &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:23 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, 0x0, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:23 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, 0x0) 18:30:23 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, 0x0, &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:23 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:23 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:23 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:23 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, 0x0, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:23 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, 0x0) 18:30:23 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, 0x0, &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:23 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:23 executing program 0: r0 = syz_io_uring_setup(0x3f22, &(0x7f0000000000)={0x0, 0xffffffff, 0x2, 0x0, 0xfffffffe}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000001c0), &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r0, 0x8000000) r1 = fork() msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000100)=""/113) r2 = msgget$private(0x0, 0x4db) r3 = getegid() r4 = getegid() msgctl$IPC_SET(r2, 0x1, &(0x7f0000000200)={{0x2, 0xffffffffffffffff, r3, 0x0, r4, 0x2, 0xfff}, 0x0, 0x0, 0xb390, 0x8, 0x100, 0x0, 0x20200000, 0x2, 0x34, 0x1f, 0x0, r1}) 18:30:23 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:24 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, 0x0) 18:30:24 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, 0x0, &(0x7f0000000580)='GPL\x00', 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:24 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, 0x0, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:24 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:24 executing program 5: ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, 0x0) 18:30:24 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:24 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 18:30:24 executing program 0: r0 = syz_io_uring_setup(0x3f22, &(0x7f0000000000)={0x0, 0xffffffff, 0x2, 0x0, 0xfffffffe}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000001c0), &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r0, 0x8000000) r1 = fork() msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000100)=""/113) r2 = msgget$private(0x0, 0x4db) r3 = getegid() r4 = getegid() msgctl$IPC_SET(r2, 0x1, &(0x7f0000000200)={{0x2, 0xffffffffffffffff, r3, 0x0, r4, 0x2, 0xfff}, 0x0, 0x0, 0xb390, 0x8, 0x100, 0x0, 0x20200000, 0x2, 0x34, 0x1f, 0x0, r1}) 18:30:24 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:30:24 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:24 executing program 5: ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, 0x0) 18:30:24 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 18:30:24 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000002200)={{0x0, 0x5, 0x3, 0xe6, 'syz0\x00', 0x7f}, 0x0, 0x0, 0x1ff, r1, 0x2, 0x9, 'syz0\x00', &(0x7f0000000100)=[')\\&[:..\\\x00', '/dev/snd/controlC#\x00'], 0x1c, [], [0x100, 0x4ee, 0x6]}) fork() 18:30:24 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:24 executing program 0: r0 = syz_io_uring_setup(0x3f22, &(0x7f0000000000)={0x0, 0xffffffff, 0x2, 0x0, 0xfffffffe}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000001c0), &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r0, 0x8000000) r1 = fork() msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000100)=""/113) r2 = msgget$private(0x0, 0x4db) r3 = getegid() r4 = getegid() msgctl$IPC_SET(r2, 0x1, &(0x7f0000000200)={{0x2, 0xffffffffffffffff, r3, 0x0, r4, 0x2, 0xfff}, 0x0, 0x0, 0xb390, 0x8, 0x100, 0x0, 0x20200000, 0x2, 0x34, 0x1f, 0x0, r1}) 18:30:24 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:24 executing program 5: ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, 0x0) 18:30:24 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 18:30:24 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:24 executing program 0: r0 = syz_io_uring_setup(0x3f22, &(0x7f0000000000)={0x0, 0xffffffff, 0x2, 0x0, 0xfffffffe}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000001c0), &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r0, 0x8000000) fork() msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000100)=""/113) msgget$private(0x0, 0x4db) getegid() getegid() 18:30:24 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x34030000}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:30:24 executing program 5: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, 0x0) 18:30:24 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:24 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, 0x0, 0x0, 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:24 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:24 executing program 5: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, 0x0) 18:30:24 executing program 0: r0 = syz_io_uring_setup(0x3f22, &(0x7f0000000000)={0x0, 0xffffffff, 0x2, 0x0, 0xfffffffe}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000001c0), &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r0, 0x8000000) fork() msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000100)=""/113) msgget$private(0x0, 0x4db) getegid() 18:30:24 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x6e46, &(0x7f0000000100)={0x0, 0xf03f, 0x0, 0x2, 0x3db}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_setup(0x7dcc, &(0x7f0000000240)={0x0, 0xa1eb, 0x1, 0x3, 0xa1, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000003c0)={{0x4, 0x1, 0xfffffffe, 0x0, 'syz0\x00', 0x9}, 0xca4f, 0x10000000, 0x80000001, 0xffffffffffffffff, 0x9, 0x56, 'syz0\x00', &(0x7f00000005c0)=['\x01\x01\x00\x00/snd/controlC#\x00x\xdc\xf3E\xb6\xb9T\x05\xac\x19c\x9awB\xad\xe8u\xd3\xff\xe5\x03\x0e\x03\xab\x15Oz\x8c\x7fX7\xf9\xa7c\x8aI;o\xf0rW\xc0\a\x99\n\xa1\xff\xb0\x8bq\f\x8e\x1d\xf8\x8f\xc6\xb8', '\x00', '9+@H', '/dev/snd/controlC#\x00', '\x00', '/dev/snd/controlC#\x00', '/dev/snd/controlC#\x00'], 0xde, [], [0xeb54, 0x3ff, 0x7, 0x8000]}) fork() 18:30:24 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:24 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, 0x0, 0x0, 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:24 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:24 executing program 0: r0 = syz_io_uring_setup(0x3f22, &(0x7f0000000000)={0x0, 0xffffffff, 0x2, 0x0, 0xfffffffe}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000001c0), &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r0, 0x8000000) fork() msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000100)=""/113) msgget$private(0x0, 0x4db) 18:30:24 executing program 5: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, 0x0) 18:30:25 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:25 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, 0x0, 0x0, 0x9, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:25 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000740)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:30:25 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, 0x0, &(0x7f0000000580)='GPL\x00', 0x0, 0x7d, &(0x7f00000005c0)=""/125, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:25 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, 0x0) 18:30:25 executing program 0: r0 = syz_io_uring_setup(0x3f22, &(0x7f0000000000)={0x0, 0xffffffff, 0x2, 0x0, 0xfffffffe}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000001c0), &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r0, 0x8000000) fork() msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000100)=""/113) 18:30:25 executing program 2: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0x410000) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x50, r1, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/timer\x00', 0x103200) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x7c83, &(0x7f0000000100)={0x0, 0x2860, 0x1, 0x0, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) shmget(0x3, 0x4000, 0x2, &(0x7f0000ffa000/0x4000)=nil) fork() io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a, 0x0, r0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getpgid(r3) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc, 0x20010, r2, 0x10000000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:25 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:25 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, 0x0, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:25 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0x410000) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x50, r1, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/timer\x00', 0x103200) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x7c83, &(0x7f0000000100)={0x0, 0x2860, 0x1, 0x0, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) shmget(0x3, 0x4000, 0x2, &(0x7f0000ffa000/0x4000)=nil) fork() io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a, 0x0, r0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getpgid(r3) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc, 0x20010, r2, 0x10000000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:25 executing program 0: r0 = syz_io_uring_setup(0x3f22, &(0x7f0000000000)={0x0, 0xffffffff, 0x2, 0x0, 0xfffffffe}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000001c0), &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r0, 0x8000000) msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000100)=""/113) 18:30:25 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, 0x0) 18:30:25 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, 0x0, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:25 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x0, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:25 executing program 2: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0x410000) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x50, r1, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/timer\x00', 0x103200) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x7c83, &(0x7f0000000100)={0x0, 0x2860, 0x1, 0x0, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) shmget(0x3, 0x4000, 0x2, &(0x7f0000ffa000/0x4000)=nil) fork() io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a, 0x0, r0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getpgid(r3) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc, 0x20010, r2, 0x10000000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:25 executing program 0: syz_io_uring_setup(0x3f22, &(0x7f0000000000)={0x0, 0xffffffff, 0x2, 0x0, 0xfffffffe}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000001c0), &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000100)=""/113) 18:30:25 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0x410000) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x50, r1, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/timer\x00', 0x103200) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x7c83, &(0x7f0000000100)={0x0, 0x2860, 0x1, 0x0, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) shmget(0x3, 0x4000, 0x2, &(0x7f0000ffa000/0x4000)=nil) fork() io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a, 0x0, r0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getpgid(r3) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc, 0x20010, r2, 0x10000000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:25 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, 0x0) 18:30:25 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, 0x0, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x4, 0x5, 0xb301, 0x9}, 0x10}, 0x78) 18:30:25 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x0, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:25 executing program 2: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0x410000) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x50, r1, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/timer\x00', 0x103200) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x7c83, &(0x7f0000000100)={0x0, 0x2860, 0x1, 0x0, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) shmget(0x3, 0x4000, 0x2, &(0x7f0000ffa000/0x4000)=nil) fork() io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a, 0x0, r0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getpgid(r3) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc, 0x20010, r2, 0x10000000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:25 executing program 5: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = userfaultfd(0x81800) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) fork() read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000002200)={{0x4, 0x6, 0x8, 0x5, '\x00', 0x3}, 0x4, 0x10, 0x101, r2, 0x1, 0x7, 'syz1\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00'], 0x13, [], [0x595, 0x1, 0x4]}) 18:30:25 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, 0x0, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:30:25 executing program 0: syz_io_uring_setup(0x3f22, &(0x7f0000000000)={0x0, 0xffffffff, 0x2, 0x0, 0xfffffffe}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000001c0), &(0x7f00000000c0)) msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000100)=""/113) 18:30:25 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0x410000) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x50, r1, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/timer\x00', 0x103200) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x7c83, &(0x7f0000000100)={0x0, 0x2860, 0x1, 0x0, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) shmget(0x3, 0x4000, 0x2, &(0x7f0000ffa000/0x4000)=nil) fork() io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a, 0x0, r0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getpgid(r3) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc, 0x20010, r2, 0x10000000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:25 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x0, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:25 executing program 5: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = userfaultfd(0x81800) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) fork() read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000002200)={{0x4, 0x6, 0x8, 0x5, '\x00', 0x3}, 0x4, 0x10, 0x101, r2, 0x1, 0x7, 'syz1\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00'], 0x13, [], [0x595, 0x1, 0x4]}) 18:30:25 executing program 0: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000100)=""/113) 18:30:26 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = userfaultfd(0x81800) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) fork() read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000002200)={{0x4, 0x6, 0x8, 0x5, '\x00', 0x3}, 0x4, 0x10, 0x101, r2, 0x1, 0x7, 'syz1\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00'], 0x13, [], [0x595, 0x1, 0x4]}) 18:30:26 executing program 2: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0x410000) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x50, r1, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/timer\x00', 0x103200) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_io_uring_setup(0x7c83, &(0x7f0000000100)={0x0, 0x2860, 0x1, 0x0, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) shmget(0x3, 0x4000, 0x2, &(0x7f0000ffa000/0x4000)=nil) fork() io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a, 0x0, r0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getpgid(r2) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:26 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x0, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:26 executing program 5: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = userfaultfd(0x81800) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) fork() read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000002200)={{0x4, 0x6, 0x8, 0x5, '\x00', 0x3}, 0x4, 0x10, 0x101, r2, 0x1, 0x7, 'syz1\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00'], 0x13, [], [0x595, 0x1, 0x4]}) 18:30:26 executing program 0: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, 0x0) 18:30:26 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0x410000) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x50, r1, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/timer\x00', 0x103200) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x7c83, &(0x7f0000000100)={0x0, 0x2860, 0x1, 0x0, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) shmget(0x3, 0x4000, 0x2, &(0x7f0000ffa000/0x4000)=nil) fork() io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a, 0x0, r0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getpgid(r3) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc, 0x20010, r2, 0x10000000) 18:30:26 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = userfaultfd(0x81800) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) fork() read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000002200)={{0x4, 0x6, 0x8, 0x5, '\x00', 0x3}, 0x4, 0x10, 0x101, r2, 0x1, 0x7, 'syz1\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00'], 0x13, [], [0x595, 0x1, 0x4]}) 18:30:26 executing program 2: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0x410000) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x50, r1, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/timer\x00', 0x103200) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_io_uring_setup(0x7c83, &(0x7f0000000100)={0x0, 0x2860, 0x1, 0x0, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) shmget(0x3, 0x4000, 0x2, &(0x7f0000ffa000/0x4000)=nil) fork() io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a, 0x0, r0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getpgid(r2) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:26 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x0, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:26 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0x410000) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x50, r1, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/timer\x00', 0x103200) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_io_uring_setup(0x7c83, &(0x7f0000000100)={0x0, 0x2860, 0x1, 0x0, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) shmget(0x3, 0x4000, 0x2, &(0x7f0000ffa000/0x4000)=nil) fork() io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a, 0x0, r0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getpgid(r2) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:26 executing program 5: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = userfaultfd(0x81800) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) fork() read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000002200)={{0x4, 0x6, 0x8, 0x5, '\x00', 0x3}, 0x4, 0x10, 0x101, r2, 0x1, 0x7, 'syz1\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00'], 0x13, [], [0x595, 0x1, 0x4]}) 18:30:26 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = userfaultfd(0x81800) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) fork() read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000002200)={{0x4, 0x6, 0x8, 0x5, '\x00', 0x3}, 0x4, 0x10, 0x101, r2, 0x1, 0x7, 'syz1\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00'], 0x13, [], [0x595, 0x1, 0x4]}) 18:30:26 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x0, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:26 executing program 2: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0x410000) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x50, r1, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/timer\x00', 0x103200) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_io_uring_setup(0x7c83, &(0x7f0000000100)={0x0, 0x2860, 0x1, 0x0, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) shmget(0x3, 0x4000, 0x2, &(0x7f0000ffa000/0x4000)=nil) fork() io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a, 0x0, r0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020}, 0x2020) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:26 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0x410000) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x50, r1, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/timer\x00', 0x103200) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_io_uring_setup(0x7c83, &(0x7f0000000100)={0x0, 0x2860, 0x1, 0x0, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) shmget(0x3, 0x4000, 0x2, &(0x7f0000ffa000/0x4000)=nil) fork() io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a, 0x0, r0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getpgid(r2) 18:30:26 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0x410000) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x50, r1, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/timer\x00', 0x103200) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_io_uring_setup(0x7c83, &(0x7f0000000100)={0x0, 0x2860, 0x1, 0x0, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) shmget(0x3, 0x4000, 0x2, &(0x7f0000ffa000/0x4000)=nil) fork() io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a, 0x0, r0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getpgid(r2) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:26 executing program 5: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = userfaultfd(0x81800) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000002200)={{0x4, 0x6, 0x8, 0x5, '\x00', 0x3}, 0x4, 0x10, 0x101, 0x0, 0x1, 0x7, 'syz1\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00'], 0x13, [], [0x595, 0x1, 0x4]}) 18:30:26 executing program 2: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0x410000) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x50, r1, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/timer\x00', 0x103200) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_io_uring_setup(0x7c83, &(0x7f0000000100)={0x0, 0x2860, 0x1, 0x0, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) shmget(0x3, 0x4000, 0x2, &(0x7f0000ffa000/0x4000)=nil) fork() io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a, 0x0, r0}) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:26 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = userfaultfd(0x81800) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) fork() read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020}, 0x2020) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) 18:30:26 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:26 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0x410000) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x50, r1, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/timer\x00', 0x103200) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_io_uring_setup(0x7c83, &(0x7f0000000100)={0x0, 0x2860, 0x1, 0x0, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) shmget(0x3, 0x4000, 0x2, &(0x7f0000ffa000/0x4000)=nil) fork() io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a, 0x0, r0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020}, 0x2020) 18:30:26 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0x410000) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x50, r1, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/timer\x00', 0x103200) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_io_uring_setup(0x7c83, &(0x7f0000000100)={0x0, 0x2860, 0x1, 0x0, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) shmget(0x3, 0x4000, 0x2, &(0x7f0000ffa000/0x4000)=nil) fork() io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a, 0x0, r0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getpgid(r2) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:26 executing program 5: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = userfaultfd(0x81800) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000002200)={{0x4, 0x6, 0x8, 0x5, '\x00', 0x3}, 0x4, 0x10, 0x101, 0x0, 0x1, 0x7, 'syz1\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00'], 0x13, [], [0x595, 0x1, 0x4]}) 18:30:27 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0x410000) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x50, r0, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/timer\x00', 0x103200) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_io_uring_setup(0x7c83, &(0x7f0000000100)={0x0, 0x2860, 0x1, 0x0, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) shmget(0x3, 0x4000, 0x2, &(0x7f0000ffa000/0x4000)=nil) fork() mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:27 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = userfaultfd(0x81800) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) fork() msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) 18:30:27 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:27 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0x410000) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x50, r1, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/timer\x00', 0x103200) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_io_uring_setup(0x7c83, &(0x7f0000000100)={0x0, 0x2860, 0x1, 0x0, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) shmget(0x3, 0x4000, 0x2, &(0x7f0000ffa000/0x4000)=nil) fork() io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a, 0x0, r0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getpgid(r2) 18:30:27 executing program 5: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) userfaultfd(0x81800) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000002200)={{0x4, 0x6, 0x8, 0x5, '\x00', 0x3}, 0x4, 0x10, 0x101, 0x0, 0x1, 0x7, 'syz1\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00'], 0x13, [], [0x595, 0x1, 0x4]}) 18:30:27 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0x410000) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x50, r1, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/timer\x00', 0x103200) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_io_uring_setup(0x7c83, &(0x7f0000000100)={0x0, 0x2860, 0x1, 0x0, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) shmget(0x3, 0x4000, 0x2, &(0x7f0000ffa000/0x4000)=nil) fork() io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a, 0x0, r0}) 18:30:27 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = userfaultfd(0x81800) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) 18:30:27 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0x410000) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x50, r0, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/timer\x00', 0x103200) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_io_uring_setup(0x7c83, &(0x7f0000000100)={0x0, 0x2860, 0x1, 0x0, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) shmget(0x3, 0x4000, 0x2, &(0x7f0000ffa000/0x4000)=nil) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:27 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:27 executing program 5: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000002200)={{0x4, 0x6, 0x8, 0x5, '\x00', 0x3}, 0x4, 0x10, 0x101, 0x0, 0x1, 0x7, 'syz1\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00'], 0x13, [], [0x595, 0x1, 0x4]}) 18:30:27 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0x410000) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x50, r1, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/timer\x00', 0x103200) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_io_uring_setup(0x7c83, &(0x7f0000000100)={0x0, 0x2860, 0x1, 0x0, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) shmget(0x3, 0x4000, 0x2, &(0x7f0000ffa000/0x4000)=nil) fork() io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a, 0x0, r0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020}, 0x2020) 18:30:27 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0x410000) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x50, r1, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/timer\x00', 0x103200) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_io_uring_setup(0x7c83, &(0x7f0000000100)={0x0, 0x2860, 0x1, 0x0, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) shmget(0x3, 0x4000, 0x2, &(0x7f0000ffa000/0x4000)=nil) io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a, 0x0, r0}) 18:30:27 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) userfaultfd(0x81800) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) 18:30:27 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0x410000) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x50, r0, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/timer\x00', 0x103200) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_io_uring_setup(0x7c83, &(0x7f0000000100)={0x0, 0x2860, 0x1, 0x0, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:27 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:27 executing program 5: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000002200)={{0x4, 0x6, 0x8, 0x5, '\x00', 0x3}, 0x4, 0x10, 0x101, 0x0, 0x1, 0x7, 'syz1\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00'], 0x13, [], [0x595, 0x1, 0x4]}) 18:30:27 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) 18:30:27 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0x410000) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x50, r1, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/timer\x00', 0x103200) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_io_uring_setup(0x7c83, &(0x7f0000000100)={0x0, 0x2860, 0x1, 0x0, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a, 0x0, r0}) 18:30:27 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0x410000) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x50, r1, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/timer\x00', 0x103200) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_io_uring_setup(0x7c83, &(0x7f0000000100)={0x0, 0x2860, 0x1, 0x0, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) shmget(0x3, 0x4000, 0x2, &(0x7f0000ffa000/0x4000)=nil) fork() io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a, 0x0, r0}) 18:30:27 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0x410000) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x50, r0, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/timer\x00', 0x103200) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:27 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:27 executing program 5: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000002200)={{0x4, 0x6, 0x8, 0x5, '\x00', 0x3}, 0x4, 0x10, 0x101, 0x0, 0x1, 0x7, 'syz1\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00'], 0x13, [], [0x595, 0x1, 0x4]}) 18:30:27 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) 18:30:27 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0x410000) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x50, r1, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/timer\x00', 0x103200) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a, 0x0, r0}) 18:30:28 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0x410000) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x50, r0, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/timer\x00', 0x103200) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_io_uring_setup(0x7c83, &(0x7f0000000100)={0x0, 0x2860, 0x1, 0x0, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) shmget(0x3, 0x4000, 0x2, &(0x7f0000ffa000/0x4000)=nil) fork() 18:30:28 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0x410000) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x50, r0, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/timer\x00', 0x103200) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:28 executing program 4: msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) 18:30:28 executing program 5: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000002200)={{0x4, 0x6, 0x8, 0x5, '\x00', 0x3}, 0x4, 0x10, 0x101, 0x0, 0x1, 0x7, 'syz1\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00'], 0x13, [], [0x595, 0x1, 0x4]}) 18:30:28 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:28 executing program 4: msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) 18:30:28 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0x410000) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x50, r1, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/timer\x00', 0x103200) io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a, 0x0, r0}) 18:30:28 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0x410000) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x50, r0, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/timer\x00', 0x103200) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_io_uring_setup(0x7c83, &(0x7f0000000100)={0x0, 0x2860, 0x1, 0x0, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) shmget(0x3, 0x4000, 0x2, &(0x7f0000ffa000/0x4000)=nil) 18:30:28 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000002200)={{0x4, 0x6, 0x8, 0x5, '\x00', 0x3}, 0x4, 0x10, 0x101, 0x0, 0x1, 0x7, 'syz1\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00'], 0x13, [], [0x595, 0x1, 0x4]}) 18:30:28 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0x410000) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x50, r0, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/timer\x00', 0x103200) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:28 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x40, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:28 executing program 4: msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) 18:30:28 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0x410000) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x50, r0, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/timer\x00', 0x103200) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_io_uring_setup(0x7c83, &(0x7f0000000100)={0x0, 0x2860, 0x1, 0x0, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) 18:30:28 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0x410000) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x50, r0, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/timer\x00', 0x103200) syz_io_uring_setup(0x7c83, &(0x7f0000000100)={0x0, 0x2860, 0x1, 0x0, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:28 executing program 5: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000002200)={{0x4, 0x6, 0x8, 0x5, '\x00', 0x3}, 0x4, 0x10, 0x101, 0x0, 0x1, 0x7, 'syz1\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00'], 0x13, [], [0x595, 0x1, 0x4]}) 18:30:28 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0x410000) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x50, r1, 0x4) io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a, 0x0, r0}) 18:30:28 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) 18:30:28 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0x410000) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x50, r0, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/timer\x00', 0x103200) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) 18:30:28 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0x410000) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x50, r0, 0x4) syz_io_uring_setup(0x7c83, &(0x7f0000000100)={0x0, 0x2860, 0x1, 0x0, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:28 executing program 5: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000002200)={{0x4, 0x6, 0x8, 0x5, '\x00', 0x3}, 0x4, 0x10, 0x101, 0x0, 0x1, 0x7, 'syz1\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00'], 0x13, [], [0x595, 0x1, 0x4]}) 18:30:28 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x40, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:28 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0x410000) io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a, 0x0, r0}) 18:30:28 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) 18:30:28 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0x410000) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x50, r0, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/timer\x00', 0x103200) 18:30:28 executing program 5: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000002200)={{0x4, 0x6, 0x8, 0x5, '\x00', 0x3}, 0x4, 0x10, 0x101, 0x0, 0x1, 0x7, 'syz1\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00'], 0x13, [], [0x595, 0x1, 0x4]}) 18:30:28 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0x410000) syz_io_uring_setup(0x7c83, &(0x7f0000000100)={0x0, 0x2860, 0x1, 0x0, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:28 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x40, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:28 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) 18:30:29 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a, 0x0, r0}) 18:30:29 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0x410000) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/timer\x00', 0x103200) 18:30:29 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000002200)={{0x4, 0x6, 0x8, 0x5, '\x00', 0x3}, 0x4, 0x10, 0x101, 0x0, 0x1, 0x7, 'syz1\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00'], 0x13, [], [0x595, 0x1, 0x4]}) 18:30:29 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) syz_io_uring_setup(0x7c83, &(0x7f0000000100)={0x0, 0x2860, 0x1, 0x0, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:29 executing program 4: syz_io_uring_setup(0x3f27, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) 18:30:29 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:29 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000002200)={{0x4, 0x6, 0x8, 0x5, '\x00', 0x3}, 0x4, 0x10, 0x101, 0x0, 0x1, 0x7, 'syz1\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00'], 0x13, [], [0x595, 0x1, 0x4]}) 18:30:29 executing program 2: syz_io_uring_setup(0x7c83, &(0x7f0000000100)={0x0, 0x2860, 0x1, 0x0, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:29 executing program 4: syz_io_uring_setup(0x3f27, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) 18:30:29 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/timer\x00', 0x103200) 18:30:29 executing program 1: io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a}) 18:30:29 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000002200)={{0x4, 0x6, 0x8, 0x5, '\x00', 0x3}, 0x4, 0x10, 0x101, 0x0, 0x1, 0x7, 'syz1\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00'], 0x13, [], [0x595, 0x1, 0x4]}) 18:30:29 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x2860, 0x1, 0x0, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:29 executing program 4: syz_io_uring_setup(0x3f27, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) 18:30:29 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:29 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x2860, 0x1, 0x0, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:29 executing program 1: io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a}) 18:30:29 executing program 0: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/timer\x00', 0x103200) 18:30:29 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x2860, 0x1, 0x0, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:29 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) 18:30:29 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) 18:30:29 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:29 executing program 2: syz_io_uring_setup(0x7c83, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:29 executing program 1: io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a}) 18:30:29 executing program 0: openat$sndtimer(0xffffffffffffff9c, 0x0, 0x103200) 18:30:29 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) 18:30:29 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) 18:30:29 executing program 0: openat$sndtimer(0xffffffffffffff9c, 0x0, 0x103200) 18:30:29 executing program 2: syz_io_uring_setup(0x7c83, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:29 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a, 0x0, r0}) 18:30:29 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x40, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:30 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) 18:30:30 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) 18:30:30 executing program 0: openat$sndtimer(0xffffffffffffff9c, 0x0, 0x103200) 18:30:30 executing program 2: syz_io_uring_setup(0x7c83, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:30 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000002200)={{0x0, 0x6, 0x8, 0x5, '\x00', 0x3}, 0x4, 0x10, 0x101, 0x0, 0x1, 0x7, 'syz1\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00'], 0x13, [], [0x595, 0x1, 0x4]}) 18:30:30 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), 0x0) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) 18:30:30 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a, 0x0, r0}) 18:30:30 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x40, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:30 executing program 2: syz_io_uring_setup(0x7c83, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:30 executing program 0: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/timer\x00', 0x0) 18:30:30 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a, 0x0, r0}) 18:30:30 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000002200)={{0x0, 0x0, 0x8, 0x5, '\x00', 0x3}, 0x4, 0x10, 0x101, 0x0, 0x1, 0x7, 'syz1\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00'], 0x13, [], [0x595, 0x1, 0x4]}) 18:30:30 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x40, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:30 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), 0x0) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) 18:30:30 executing program 2: syz_io_uring_setup(0x7c83, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:30 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) 18:30:30 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000002200)={{0x0, 0x0, 0x0, 0x5, '\x00', 0x3}, 0x4, 0x10, 0x101, 0x0, 0x1, 0x7, 'syz1\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00'], 0x13, [], [0x595, 0x1, 0x4]}) 18:30:30 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:30 executing program 1: r0 = syz_io_uring_setup(0x3f27, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a, 0x0, r0}) 18:30:30 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), 0x0) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) 18:30:30 executing program 0: syz_io_uring_setup(0x7c83, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:30 executing program 2: syz_io_uring_setup(0x7c83, &(0x7f0000000100), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:30 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000002200)={{0x0, 0x0, 0x0, 0x0, '\x00', 0x3}, 0x4, 0x10, 0x101, 0x0, 0x1, 0x7, 'syz1\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00'], 0x13, [], [0x595, 0x1, 0x4]}) 18:30:30 executing program 0: syz_io_uring_setup(0x7c83, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:30 executing program 1: r0 = syz_io_uring_setup(0x3f27, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a, 0x0, r0}) 18:30:30 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:30 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), 0x0) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) 18:30:30 executing program 0: syz_io_uring_setup(0x7c83, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:30 executing program 2: syz_io_uring_setup(0x7c83, &(0x7f0000000100), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000240)) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:30 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000002200)={{}, 0x4, 0x10, 0x101, 0x0, 0x1, 0x7, 'syz1\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00'], 0x13, [], [0x595, 0x1, 0x4]}) 18:30:31 executing program 0: mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:31 executing program 1: r0 = syz_io_uring_setup(0x3f27, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a, 0x0, r0}) 18:30:31 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000002200)={{}, 0x0, 0x10, 0x101, 0x0, 0x1, 0x7, 'syz1\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00'], 0x13, [], [0x595, 0x1, 0x4]}) 18:30:31 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) 18:30:31 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:31 executing program 2: syz_io_uring_setup(0x7c83, &(0x7f0000000100), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000240)) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:31 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a, 0x0, r0}) 18:30:31 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000002200)={{}, 0x0, 0x0, 0x101, 0x0, 0x1, 0x7, 'syz1\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00'], 0x13, [], [0x595, 0x1, 0x4]}) 18:30:31 executing program 0: mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) 18:30:31 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) 18:30:31 executing program 2: syz_io_uring_setup(0x7c83, &(0x7f0000000100), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000240)) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:31 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:31 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000002200)={{}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 'syz1\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00'], 0x13, [], [0x595, 0x1, 0x4]}) 18:30:31 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a, 0x0, r0}) 18:30:31 executing program 0: mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) 18:30:31 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) 18:30:31 executing program 2: syz_io_uring_setup(0x7c83, &(0x7f0000000100), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:31 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000002200)={{}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00'], 0x13, [], [0x595, 0x1, 0x4]}) 18:30:31 executing program 0: mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) 18:30:31 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:31 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000080)) io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a, 0x0, r0}) 18:30:31 executing program 4: msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) 18:30:31 executing program 0: mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) 18:30:31 executing program 2: syz_io_uring_setup(0x7c83, &(0x7f0000000100), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) 18:30:31 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000002200)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x0, [], [0x595, 0x1, 0x4]}) 18:30:31 executing program 4: msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) 18:30:31 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:31 executing program 0: mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) 18:30:31 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000080)) io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a, 0x0, r0}) 18:30:31 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000002200)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x0, [], [0x595, 0x1]}) 18:30:31 executing program 2: syz_io_uring_setup(0x7c83, &(0x7f0000000100), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) 18:30:31 executing program 4: msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) 18:30:32 executing program 0: mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) 18:30:32 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000080)) io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a, 0x0, r0}) 18:30:32 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000002200)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x0, [], [0x595]}) 18:30:32 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:32 executing program 2: syz_io_uring_setup(0x7c83, &(0x7f0000000100), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) 18:30:32 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) 18:30:32 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000002200)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 18:30:32 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000002200)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x0, [], [0x595, 0x1, 0x4]}) 18:30:32 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a, 0x0, r0}) 18:30:32 executing program 2: syz_io_uring_setup(0x7c83, &(0x7f0000000100), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000240)) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:32 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) 18:30:32 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:32 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) 18:30:32 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x2860, 0x1, 0x0, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:32 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a, 0x0, r0}) 18:30:32 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) 18:30:32 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x0, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:32 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:32 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) 18:30:32 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x2860, 0x1, 0x0, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:32 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a, 0x0, r0}) 18:30:32 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:32 executing program 4: syz_io_uring_setup(0x3f27, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) 18:30:32 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = userfaultfd(0x81800) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) fork() read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000002200)={{0x4, 0x6, 0x8, 0x5, '\x00', 0x3}, 0x4, 0x10, 0x101, r2, 0x1, 0x7, 'syz1\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00'], 0x13, [], [0x595, 0x1, 0x4]}) 18:30:32 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x2860, 0x1, 0x0, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:32 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) 18:30:32 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a, 0x0, r0}) 18:30:32 executing program 4: syz_io_uring_setup(0x3f27, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) 18:30:32 executing program 0: mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:32 executing program 5: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) 18:30:32 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:33 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a, 0x0, r0}) 18:30:33 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x1df, &(0x7f00000001c0)={0x0, 0x4d14, 0x20, 0x2, 0x290}) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000100)=0x61) fork() 18:30:33 executing program 0: mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:33 executing program 4: syz_io_uring_setup(0x3f27, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) 18:30:33 executing program 5: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) 18:30:33 executing program 0: mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:33 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x1df, &(0x7f00000001c0)={0x0, 0x4d14, 0x20, 0x2, 0x290}) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000100)=0x61) fork() 18:30:33 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:33 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x2, 0x26a, 0x0, r0}) 18:30:33 executing program 5: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) 18:30:33 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) 18:30:33 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:33 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x1df, &(0x7f00000001c0)={0x0, 0x4d14, 0x20, 0x2, 0x290}) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000100)=0x61) fork() 18:30:33 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:33 executing program 5: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) 18:30:33 executing program 1: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) io_uring_setup(0x3e6f, 0x0) 18:30:33 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) 18:30:33 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:33 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x1df, &(0x7f00000001c0)={0x0, 0x4d14, 0x20, 0x2, 0x290}) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000100)=0x61) 18:30:33 executing program 5: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) 18:30:33 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:33 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x1df, &(0x7f00000001c0)={0x0, 0x4d14, 0x20, 0x2, 0x290}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000100)=0x61) 18:30:33 executing program 1: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) io_uring_setup(0x3e6f, 0x0) 18:30:33 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) 18:30:33 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:33 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x1df, &(0x7f00000001c0)={0x0, 0x4d14, 0x20, 0x2, 0x290}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000100)=0x61) 18:30:33 executing program 5: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) 18:30:34 executing program 1: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) io_uring_setup(0x3e6f, 0x0) 18:30:34 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f00000000c0)) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000100)=0xffffff0c) fork() 18:30:34 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:34 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:34 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f00000000c0)) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000100)=0xffffff0c) fork() 18:30:34 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0x0, 0x2c, 0x2, 0x26a, 0x0, r0}) 18:30:34 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) 18:30:34 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x1df, &(0x7f00000001c0)={0x0, 0x4d14, 0x20, 0x2, 0x290}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000100)=0x61) 18:30:34 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x166}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:34 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:34 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0x0, 0x2c, 0x2, 0x26a, 0x0, r0}) 18:30:34 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f00000000c0)) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000100)=0xffffff0c) fork() 18:30:34 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) 18:30:34 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000100)=0x61) 18:30:34 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:34 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) 18:30:34 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f00000000c0)) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000100)=0xffffff0c) 18:30:34 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0x0, 0x2c, 0x2, 0x26a, 0x0, r0}) 18:30:34 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:34 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000100)=0x61) 18:30:34 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000100)=0x61) 18:30:34 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000240)) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:34 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f00000000c0)) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000100)=0xffffff0c) 18:30:34 executing program 5: syz_io_uring_setup(0x3084, &(0x7f0000000000)={0x0, 0x0, 0x8}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003840)) read$FUSE(0xffffffffffffffff, &(0x7f00000016c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000003700)={{0x0, 0x3, 0xf9, 0x2, '\x00', 0xfd8b}, 0x1, 0x3, 0x8, r0, 0x1, 0x401, 'syz1\x00', &(0x7f0000000140)=['s,\x00'], 0x3, [], [0x0, 0x1, 0xff80, 0x110]}) r1 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000100)={0x0, 0x5, 0xc069, 0xfffffffa, 'syz1\x00', 0x6}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f00000001c0)={{0x4, 0x4, 0x3, 0xfffffffc, 'syz1\x00', 0x3f}, 0x1, [0x8001, 0x7, 0xc6, 0x5, 0x9, 0x1, 0x9, 0x100000001, 0x7, 0x8, 0x8, 0x15, 0x80, 0xb6, 0x14, 0x5f, 0xfffffffffffff7cf, 0x6, 0x0, 0x1, 0x1, 0x18d, 0x7f, 0xffffffffffffff00, 0xffffffffffffffff, 0x4, 0x2, 0x80000001, 0x1, 0x5, 0x0, 0x7, 0x5, 0x5, 0x10000, 0x101, 0x9, 0x20, 0x7f, 0x5, 0x1, 0x1a4a, 0xfff, 0x1f, 0x0, 0x9, 0x3, 0x8, 0xfffffffffffffffe, 0x0, 0x8, 0x7, 0xfffffffffffffffa, 0x5, 0x4, 0xfffffffffffffffc, 0x1, 0x1, 0x1, 0xf41, 0xfff, 0x7f, 0x0, 0x4, 0x7, 0xfd7, 0x8001, 0x4, 0x9, 0x0, 0x80, 0x5, 0x7ff, 0x9, 0x1, 0x8, 0x4, 0x38b5c08d, 0x6, 0x8, 0x3ff, 0x87, 0x7f, 0x2, 0x1, 0x1, 0x8, 0x2f44, 0x89, 0x101, 0x1, 0x9, 0x80, 0x8, 0x7, 0x4, 0x2, 0x6, 0x7f, 0x1000000000000, 0x7fff, 0x8, 0x7, 0x10000, 0x40000000006, 0x27, 0x3, 0x1000, 0x400, 0x8, 0x2, 0x0, 0x15, 0x4001, 0x7, 0x1f, 0x2, 0x7, 0x6, 0x6, 0xfffffffffffffff8, 0x5, 0x1, 0x4, 0x3, 0x80000001, 0x9f, 0x100]}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f00000006c0)=""/4096) 18:30:34 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x0, 0x2, 0x26a, 0x0, r0}) 18:30:34 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:34 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000100)=0x61) 18:30:34 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f00000000c0)) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000100)=0xffffff0c) 18:30:34 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 18:30:34 executing program 5: syz_io_uring_setup(0x3084, &(0x7f0000000000)={0x0, 0x0, 0x8}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003840)) read$FUSE(0xffffffffffffffff, &(0x7f00000016c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000003700)={{0x0, 0x3, 0xf9, 0x2, '\x00', 0xfd8b}, 0x1, 0x3, 0x8, r0, 0x1, 0x401, 'syz1\x00', &(0x7f0000000140)=['s,\x00'], 0x3, [], [0x0, 0x1, 0xff80, 0x110]}) r1 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000100)={0x0, 0x5, 0xc069, 0xfffffffa, 'syz1\x00', 0x6}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f00000001c0)={{0x4, 0x4, 0x3, 0xfffffffc, 'syz1\x00', 0x3f}, 0x1, [0x8001, 0x7, 0xc6, 0x5, 0x9, 0x1, 0x9, 0x100000001, 0x7, 0x8, 0x8, 0x15, 0x80, 0xb6, 0x14, 0x5f, 0xfffffffffffff7cf, 0x6, 0x0, 0x1, 0x1, 0x18d, 0x7f, 0xffffffffffffff00, 0xffffffffffffffff, 0x4, 0x2, 0x80000001, 0x1, 0x5, 0x0, 0x7, 0x5, 0x5, 0x10000, 0x101, 0x9, 0x20, 0x7f, 0x5, 0x1, 0x1a4a, 0xfff, 0x1f, 0x0, 0x9, 0x3, 0x8, 0xfffffffffffffffe, 0x0, 0x8, 0x7, 0xfffffffffffffffa, 0x5, 0x4, 0xfffffffffffffffc, 0x1, 0x1, 0x1, 0xf41, 0xfff, 0x7f, 0x0, 0x4, 0x7, 0xfd7, 0x8001, 0x4, 0x9, 0x0, 0x80, 0x5, 0x7ff, 0x9, 0x1, 0x8, 0x4, 0x38b5c08d, 0x6, 0x8, 0x3ff, 0x87, 0x7f, 0x2, 0x1, 0x1, 0x8, 0x2f44, 0x89, 0x101, 0x1, 0x9, 0x80, 0x8, 0x7, 0x4, 0x2, 0x6, 0x7f, 0x1000000000000, 0x7fff, 0x8, 0x7, 0x10000, 0x40000000006, 0x27, 0x3, 0x1000, 0x400, 0x8, 0x2, 0x0, 0x15, 0x4001, 0x7, 0x1f, 0x2, 0x7, 0x6, 0x6, 0xfffffffffffffff8, 0x5, 0x1, 0x4, 0x3, 0x80000001, 0x9f, 0x100]}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f00000006c0)=""/4096) 18:30:35 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x0, 0x2, 0x26a, 0x0, r0}) 18:30:35 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000100)=0x61) 18:30:35 executing program 5: syz_io_uring_setup(0x3084, &(0x7f0000000000)={0x0, 0x0, 0x8}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003840)) read$FUSE(0xffffffffffffffff, &(0x7f00000016c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000003700)={{0x0, 0x3, 0xf9, 0x2, '\x00', 0xfd8b}, 0x1, 0x3, 0x8, r0, 0x1, 0x401, 'syz1\x00', &(0x7f0000000140)=['s,\x00'], 0x3, [], [0x0, 0x1, 0xff80, 0x110]}) r1 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000100)={0x0, 0x5, 0xc069, 0xfffffffa, 'syz1\x00', 0x6}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f00000001c0)={{0x4, 0x4, 0x3, 0xfffffffc, 'syz1\x00', 0x3f}, 0x1, [0x8001, 0x7, 0xc6, 0x5, 0x9, 0x1, 0x9, 0x100000001, 0x7, 0x8, 0x8, 0x15, 0x80, 0xb6, 0x14, 0x5f, 0xfffffffffffff7cf, 0x6, 0x0, 0x1, 0x1, 0x18d, 0x7f, 0xffffffffffffff00, 0xffffffffffffffff, 0x4, 0x2, 0x80000001, 0x1, 0x5, 0x0, 0x7, 0x5, 0x5, 0x10000, 0x101, 0x9, 0x20, 0x7f, 0x5, 0x1, 0x1a4a, 0xfff, 0x1f, 0x0, 0x9, 0x3, 0x8, 0xfffffffffffffffe, 0x0, 0x8, 0x7, 0xfffffffffffffffa, 0x5, 0x4, 0xfffffffffffffffc, 0x1, 0x1, 0x1, 0xf41, 0xfff, 0x7f, 0x0, 0x4, 0x7, 0xfd7, 0x8001, 0x4, 0x9, 0x0, 0x80, 0x5, 0x7ff, 0x9, 0x1, 0x8, 0x4, 0x38b5c08d, 0x6, 0x8, 0x3ff, 0x87, 0x7f, 0x2, 0x1, 0x1, 0x8, 0x2f44, 0x89, 0x101, 0x1, 0x9, 0x80, 0x8, 0x7, 0x4, 0x2, 0x6, 0x7f, 0x1000000000000, 0x7fff, 0x8, 0x7, 0x10000, 0x40000000006, 0x27, 0x3, 0x1000, 0x400, 0x8, 0x2, 0x0, 0x15, 0x4001, 0x7, 0x1f, 0x2, 0x7, 0x6, 0x6, 0xfffffffffffffff8, 0x5, 0x1, 0x4, 0x3, 0x80000001, 0x9f, 0x100]}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f00000006c0)=""/4096) 18:30:35 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f00000000c0)) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000100)=0xffffff0c) 18:30:35 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) 18:30:35 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, 0xffffffffffffffff, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:35 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x0, 0x2, 0x26a, 0x0, r0}) 18:30:35 executing program 5: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000001c0)={{0x9, 0x5, 0x3, 0x7ff, 'syz1\x00', 0x800}, 0x3, 0x0, 0x10f, 0x0, 0x1, 0x7, 'syz1\x00', &(0x7f0000000080)=['/dev/snd/controlC#\x00'], 0x13, [], [0xe3b9, 0x0, 0x0, 0x3]}) syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x6, 0x4, 0x2, 0x5, &(0x7f0000000300)=[{}, {}, {}, {}]}) socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000480)={'syzkaller0\x00'}) 18:30:35 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000100)=0x61) 18:30:35 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) 18:30:35 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000100)=0xffffff0c) 18:30:35 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, 0xffffffffffffffff, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:35 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x0, 0x26a, 0x0, r0}) 18:30:35 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000100)=0x61) 18:30:35 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000100)=0xffffff0c) 18:30:35 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) 18:30:35 executing program 5: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000001c0)={{0x9, 0x5, 0x3, 0x7ff, 'syz1\x00', 0x800}, 0x3, 0x0, 0x10f, 0x0, 0x1, 0x7, 'syz1\x00', &(0x7f0000000080)=['/dev/snd/controlC#\x00'], 0x13, [], [0xe3b9, 0x0, 0x0, 0x3]}) syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x6, 0x4, 0x2, 0x5, &(0x7f0000000300)=[{}, {}, {}, {}]}) socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000480)={'syzkaller0\x00'}) 18:30:35 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000100)=0x61) 18:30:35 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000100)=0xffffff0c) 18:30:35 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, 0xffffffffffffffff, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:35 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, 0xffffffffffffffff, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:35 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c, 0x0, 0x0, 0x0, r0}) 18:30:35 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000100)=0xffffff0c) 18:30:35 executing program 5: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000001c0)={{0x9, 0x5, 0x3, 0x7ff, 'syz1\x00', 0x800}, 0x3, 0x0, 0x10f, 0x0, 0x1, 0x7, 'syz1\x00', &(0x7f0000000080)=['/dev/snd/controlC#\x00'], 0x13, [], [0xe3b9, 0x0, 0x0, 0x3]}) syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x6, 0x4, 0x2, 0x5, &(0x7f0000000300)=[{}, {}, {}, {}]}) socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000480)={'syzkaller0\x00'}) 18:30:35 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) 18:30:35 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:36 executing program 0: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000001c0)={{0x9, 0x5, 0x3, 0x7ff, 'syz1\x00', 0x800}, 0x3, 0x0, 0x10f, 0x0, 0x1, 0x7, 'syz1\x00', &(0x7f0000000080)=['/dev/snd/controlC#\x00'], 0x13, [], [0xe3b9, 0x0, 0x0, 0x3]}) syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x6, 0x4, 0x2, 0x5, &(0x7f0000000300)=[{}, {}, {}, {}]}) socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000480)={'syzkaller0\x00'}) 18:30:36 executing program 1: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c}) 18:30:36 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) 18:30:36 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000100)=0xffffff0c) 18:30:36 executing program 5: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000001c0)={{0x9, 0x5, 0x3, 0x7ff, 'syz1\x00', 0x800}, 0x3, 0x0, 0x10f, 0x0, 0x1, 0x7, 'syz1\x00', &(0x7f0000000080)=['/dev/snd/controlC#\x00'], 0x13, [], [0xe3b9, 0x0, 0x0, 0x3]}) syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x6, 0x4, 0x2, 0x5, &(0x7f0000000300)=[{}, {}, {}, {}]}) socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x0) 18:30:36 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:36 executing program 0: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000001c0)={{0x9, 0x5, 0x3, 0x7ff, 'syz1\x00', 0x800}, 0x3, 0x0, 0x10f, 0x0, 0x1, 0x7, 'syz1\x00', &(0x7f0000000080)=['/dev/snd/controlC#\x00'], 0x13, [], [0xe3b9, 0x0, 0x0, 0x3]}) syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x6, 0x4, 0x2, 0x5, &(0x7f0000000300)=[{}, {}, {}, {}]}) socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000480)={'syzkaller0\x00'}) 18:30:36 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) 18:30:36 executing program 1: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c}) 18:30:36 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000100)=0xffffff0c) 18:30:36 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:36 executing program 5: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000001c0)={{0x9, 0x5, 0x3, 0x7ff, 'syz1\x00', 0x800}, 0x3, 0x0, 0x10f, 0x0, 0x1, 0x7, 'syz1\x00', &(0x7f0000000080)=['/dev/snd/controlC#\x00'], 0x13, [], [0xe3b9, 0x0, 0x0, 0x3]}) syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x6, 0x4, 0x2, 0x5, &(0x7f0000000300)=[{}, {}, {}, {}]}) socket$pppl2tp(0x18, 0x1, 0x1) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:30:36 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000100)) 18:30:36 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000100)=0xffffff0c) 18:30:36 executing program 0: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000001c0)={{0x9, 0x5, 0x3, 0x7ff, 'syz1\x00', 0x800}, 0x3, 0x0, 0x10f, 0x0, 0x1, 0x7, 'syz1\x00', &(0x7f0000000080)=['/dev/snd/controlC#\x00'], 0x13, [], [0xe3b9, 0x0, 0x0, 0x3]}) syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x6, 0x4, 0x2, 0x5, &(0x7f0000000300)=[{}, {}, {}, {}]}) socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000480)={'syzkaller0\x00'}) 18:30:36 executing program 1: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000080)) io_uring_setup(0x3e6f, &(0x7f0000000280)={0x0, 0xe6c6, 0x2c}) 18:30:36 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:36 executing program 5: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000001c0)={{0x9, 0x5, 0x3, 0x7ff, 'syz1\x00', 0x800}, 0x3, 0x0, 0x10f, 0x0, 0x1, 0x7, 'syz1\x00', &(0x7f0000000080)=['/dev/snd/controlC#\x00'], 0x13, [], [0xe3b9, 0x0, 0x0, 0x3]}) syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x6, 0x4, 0x2, 0x5, &(0x7f0000000300)=[{}, {}, {}, {}]}) socket$pppl2tp(0x18, 0x1, 0x1) 18:30:36 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000100)) 18:30:36 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, 0x0) 18:30:36 executing program 0: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000001c0)={{0x9, 0x5, 0x3, 0x7ff, 'syz1\x00', 0x800}, 0x3, 0x0, 0x10f, 0x0, 0x1, 0x7, 'syz1\x00', &(0x7f0000000080)=['/dev/snd/controlC#\x00'], 0x13, [], [0xe3b9, 0x0, 0x0, 0x3]}) syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x6, 0x4, 0x2, 0x5, &(0x7f0000000300)=[{}, {}, {}, {}]}) socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x0) 18:30:36 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000100)) 18:30:36 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000100)) 18:30:36 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:36 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, 0x0) 18:30:36 executing program 5: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000001c0)={{0x9, 0x5, 0x3, 0x7ff, 'syz1\x00', 0x800}, 0x3, 0x0, 0x10f, 0x0, 0x1, 0x7, 'syz1\x00', &(0x7f0000000080)=['/dev/snd/controlC#\x00'], 0x13, [], [0xe3b9, 0x0, 0x0, 0x3]}) syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x6, 0x4, 0x2, 0x5, &(0x7f0000000300)=[{}, {}, {}, {}]}) 18:30:36 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000100)) 18:30:37 executing program 0: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000001c0)={{0x9, 0x5, 0x3, 0x7ff, 'syz1\x00', 0x800}, 0x3, 0x0, 0x10f, 0x0, 0x1, 0x7, 'syz1\x00', &(0x7f0000000080)=['/dev/snd/controlC#\x00'], 0x13, [], [0xe3b9, 0x0, 0x0, 0x3]}) syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x6, 0x4, 0x2, 0x5, &(0x7f0000000300)=[{}, {}, {}, {}]}) socket$pppl2tp(0x18, 0x1, 0x1) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:30:37 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000100)) 18:30:37 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000100)) 18:30:37 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, 0x0) 18:30:37 executing program 5: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000001c0)={{0x9, 0x5, 0x3, 0x7ff, 'syz1\x00', 0x800}, 0x3, 0x0, 0x10f, 0x0, 0x1, 0x7, 'syz1\x00', &(0x7f0000000080)=['/dev/snd/controlC#\x00'], 0x13, [], [0xe3b9, 0x0, 0x0, 0x3]}) syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x6, 0x4, 0x2, 0x5, &(0x7f0000000300)=[{}, {}, {}, {}]}) 18:30:37 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:37 executing program 1: ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000100)) 18:30:37 executing program 0: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000001c0)={{0x9, 0x5, 0x3, 0x7ff, 'syz1\x00', 0x800}, 0x3, 0x0, 0x10f, 0x0, 0x1, 0x7, 'syz1\x00', &(0x7f0000000080)=['/dev/snd/controlC#\x00'], 0x13, [], [0xe3b9, 0x0, 0x0, 0x3]}) syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x6, 0x4, 0x2, 0x5, &(0x7f0000000300)=[{}, {}, {}, {}]}) socket$pppl2tp(0x18, 0x1, 0x1) 18:30:37 executing program 5: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000001c0)={{0x9, 0x5, 0x3, 0x7ff, 'syz1\x00', 0x800}, 0x3, 0x0, 0x10f, 0x0, 0x1, 0x7, 'syz1\x00', &(0x7f0000000080)=['/dev/snd/controlC#\x00'], 0x13, [], [0xe3b9, 0x0, 0x0, 0x3]}) syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000400)={0x6, 0x4, 0x2, 0x5, &(0x7f0000000300)=[{}, {}, {}, {}]}) 18:30:37 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000100)) 18:30:37 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, 0x0) 18:30:37 executing program 1: ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000100)) 18:30:37 executing program 0: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000001c0)={{0x9, 0x5, 0x3, 0x7ff, 'syz1\x00', 0x800}, 0x3, 0x0, 0x10f, 0x0, 0x1, 0x7, 'syz1\x00', &(0x7f0000000080)=['/dev/snd/controlC#\x00'], 0x13, [], [0xe3b9, 0x0, 0x0, 0x3]}) syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x6, 0x4, 0x2, 0x5, &(0x7f0000000300)=[{}, {}, {}, {}]}) 18:30:37 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) 18:30:37 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, 0x0) 18:30:37 executing program 5: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000001c0)={{0x9, 0x5, 0x3, 0x7ff, 'syz1\x00', 0x800}, 0x3, 0x0, 0x10f, 0x0, 0x1, 0x7, 'syz1\x00', &(0x7f0000000080)=['/dev/snd/controlC#\x00'], 0x13, [], [0xe3b9, 0x0, 0x0, 0x3]}) syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000400)={0x6, 0x4, 0x2, 0x5, &(0x7f0000000300)=[{}, {}, {}, {}]}) 18:30:37 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:37 executing program 1: ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000100)) 18:30:37 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) 18:30:37 executing program 0: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000001c0)={{0x9, 0x5, 0x3, 0x7ff, 'syz1\x00', 0x800}, 0x3, 0x0, 0x10f, 0x0, 0x1, 0x7, 'syz1\x00', &(0x7f0000000080)=['/dev/snd/controlC#\x00'], 0x13, [], [0xe3b9, 0x0, 0x0, 0x3]}) syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:37 executing program 5: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000001c0)={{0x9, 0x5, 0x3, 0x7ff, 'syz1\x00', 0x800}, 0x3, 0x0, 0x10f, 0x0, 0x1, 0x7, 'syz1\x00', &(0x7f0000000080)=['/dev/snd/controlC#\x00'], 0x13, [], [0xe3b9, 0x0, 0x0, 0x3]}) syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000400)={0x6, 0x4, 0x2, 0x5, &(0x7f0000000300)=[{}, {}, {}, {}]}) 18:30:37 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, 0x0) 18:30:37 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000100)) 18:30:37 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:37 executing program 0: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000001c0)={{0x9, 0x5, 0x3, 0x7ff, 'syz1\x00', 0x800}, 0x3, 0x0, 0x10f, 0x0, 0x1, 0x7, 'syz1\x00', &(0x7f0000000080)=['/dev/snd/controlC#\x00'], 0x13, [], [0xe3b9, 0x0, 0x0, 0x3]}) syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) 18:30:38 executing program 2: ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) 18:30:38 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) 18:30:38 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000100)) 18:30:38 executing program 5: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000001c0)={{0x9, 0x5, 0x3, 0x7ff, 'syz1\x00', 0x800}, 0x3, 0x0, 0x10f, 0x0, 0x1, 0x7, 'syz1\x00', &(0x7f0000000080)=['/dev/snd/controlC#\x00'], 0x13, [], [0xe3b9, 0x0, 0x0, 0x3]}) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x6, 0x4, 0x2, 0x5, &(0x7f0000000300)=[{}, {}, {}, {}]}) 18:30:38 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:38 executing program 0: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000001c0)={{0x9, 0x5, 0x3, 0x7ff, 'syz1\x00', 0x800}, 0x3, 0x0, 0x10f, 0x0, 0x1, 0x7, 'syz1\x00', &(0x7f0000000080)=['/dev/snd/controlC#\x00'], 0x13, [], [0xe3b9, 0x0, 0x0, 0x3]}) syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 18:30:38 executing program 2: ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) 18:30:38 executing program 4: ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) 18:30:38 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x6, 0x4, 0x2, 0x5, &(0x7f0000000300)=[{}, {}, {}, {}]}) 18:30:38 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000100)) 18:30:38 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:38 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 18:30:38 executing program 2: ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) 18:30:38 executing program 4: ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) 18:30:38 executing program 5: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x6, 0x4, 0x2, 0x5, &(0x7f0000000300)=[{}, {}, {}, {}]}) 18:30:38 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000100)) 18:30:38 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 18:30:38 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:38 executing program 4: ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) 18:30:38 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, 0x0) 18:30:38 executing program 5: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x6, 0x4, 0x2, 0x5, &(0x7f0000000300)=[{}, {}, {}, {}]}) 18:30:38 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 18:30:38 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000100)) 18:30:38 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, 0x0) 18:30:38 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) 18:30:38 executing program 5: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x6, 0x4, 0x2, 0x5, &(0x7f0000000300)=[{}, {}, {}, {}]}) 18:30:38 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:38 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 18:30:38 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000100)) 18:30:38 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, 0x0) 18:30:38 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) 18:30:38 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000400)={0x6, 0x4, 0x2, 0x5, &(0x7f0000000300)=[{}, {}, {}, {}]}) 18:30:39 executing program 0: syz_io_uring_setup(0x3f27, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 18:30:39 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) 18:30:39 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) 18:30:39 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x10, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:39 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000400)={0x6, 0x4, 0x2, 0x5, &(0x7f0000000300)=[{}, {}, {}, {}]}) 18:30:39 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) 18:30:39 executing program 0: syz_io_uring_setup(0x3f27, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 18:30:39 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) 18:30:39 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) 18:30:39 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) 18:30:39 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000400)={0x6, 0x4, 0x2, 0x5, &(0x7f0000000300)=[{}, {}, {}, {}]}) 18:30:39 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) 18:30:39 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x10, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:39 executing program 0: syz_io_uring_setup(0x3f27, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 18:30:39 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) 18:30:39 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) 18:30:39 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x10000}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), &(0x7f00000000c0)) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00'}, 0x10) 18:30:39 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, 0x0) 18:30:39 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 18:30:39 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) 18:30:39 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) r5 = msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r3, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r3, &(0x7f0000004300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r9 = fork() getpgid(r9) msgctl$IPC_SET(r5, 0x1, &(0x7f0000006340)={{0x0, 0xee01, r6, r7, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, r8, r9}) 18:30:39 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x10, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:39 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, 0x0) 18:30:39 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, 0x0) 18:30:39 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 18:30:39 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) r5 = msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r3, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r3, &(0x7f0000004300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r9 = fork() getpgid(r9) msgctl$IPC_SET(r5, 0x1, &(0x7f0000006340)={{0x0, 0xee01, r6, r7, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, r8, r9}) 18:30:39 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) r5 = msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r3, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r3, &(0x7f0000004300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r9 = fork() getpgid(r9) msgctl$IPC_SET(r5, 0x1, &(0x7f0000006340)={{0x0, 0xee01, r6, r7, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, r8, r9}) 18:30:39 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, 0x0) 18:30:39 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, 0x0) 18:30:39 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:39 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 18:30:39 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) r5 = msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r3, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r3, &(0x7f0000004300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r9 = fork() getpgid(r9) msgctl$IPC_SET(r5, 0x1, &(0x7f0000006340)={{0x0, 0xee01, r6, r7, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, r8, r9}) 18:30:40 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, 0x0) 18:30:40 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 18:30:40 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x0, 0x4, 0x2, 0x5, &(0x7f0000000300)=[{}, {}, {}, {}]}) 18:30:40 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) r5 = msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r3, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r3, &(0x7f0000004300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r9 = fork() getpgid(r9) msgctl$IPC_SET(r5, 0x1, &(0x7f0000006340)={{0x0, 0xee01, r6, r7, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, r8, r9}) 18:30:40 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) r5 = msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r3, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r3, &(0x7f0000004300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r9 = fork() getpgid(r9) msgctl$IPC_SET(r5, 0x1, &(0x7f0000006340)={{0x0, 0xee01, r6, r7, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, r8, r9}) 18:30:40 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:40 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 18:30:40 executing program 2: ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, 0x0) 18:30:40 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x0, 0x4, 0x2, 0x5, &(0x7f0000000300)=[{}, {}, {}, {}]}) 18:30:40 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f0000004300)={0x2020}, 0x2020) r5 = fork() getpgid(r5) 18:30:40 executing program 2: ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, 0x0) 18:30:40 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 18:30:40 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f0000004300)={0x2020}, 0x2020) r5 = fork() getpgid(r5) 18:30:40 executing program 2: ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, 0x0) 18:30:40 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x0, 0x4, 0x2, 0x5, &(0x7f0000000300)=[{}, {}, {}, {}]}) 18:30:40 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f0000004300)={0x2020}, 0x2020) fork() 18:30:40 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:40 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, 0x0) 18:30:40 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 18:30:40 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x6, 0x4, 0x0, 0x5, &(0x7f0000000300)=[{}, {}, {}, {}]}) 18:30:40 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, 0x0) 18:30:40 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f0000004300)={0x2020}, 0x2020) 18:30:40 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 18:30:40 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f0000004300)={0x2020}, 0x2020) r5 = fork() getpgid(r5) 18:30:40 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:40 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x6, 0x4, 0x0, 0x0, &(0x7f0000000300)=[{}, {}, {}, {}]}) 18:30:40 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, 0x0) 18:30:40 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 18:30:40 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020) 18:30:41 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, 0x0) 18:30:41 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x0}) 18:30:41 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:41 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 18:30:41 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f0000004300)={0x2020}, 0x2020) r5 = fork() getpgid(r5) 18:30:41 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020) 18:30:41 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, 0x0) 18:30:41 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x0}) 18:30:41 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, 0x0) 18:30:41 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) 18:30:41 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:41 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x0}) 18:30:41 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x0}) 18:30:41 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) msgget$private(0x0, 0x100) 18:30:41 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) r5 = msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r3, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r3, &(0x7f0000004300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r9 = fork() msgctl$IPC_SET(r5, 0x1, &(0x7f0000006340)={{0x0, 0xee01, r6, r7, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, r8, r9}) 18:30:41 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) 18:30:41 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(0x0, 0x0, 0x0) fork() 18:30:41 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x6, 0x3, 0x0, 0x0, &(0x7f0000000300)=[{}, {}, {}]}) 18:30:41 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) msgget$private(0x0, 0x100) 18:30:41 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x0}) 18:30:41 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) 18:30:41 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x0}) 18:30:41 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x6, 0x2, 0x0, 0x0, &(0x7f0000000300)=[{}, {}]}) 18:30:41 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x0}) 18:30:41 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) r5 = msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r3, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r8 = fork() msgctl$IPC_SET(r5, 0x1, &(0x7f0000006340)={{0x0, 0xee01, r6, r7, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r8}) 18:30:41 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) msgget$private(0x0, 0x100) 18:30:41 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(0x0, 0x0, 0x0) fork() 18:30:41 executing program 2: ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x0}) 18:30:42 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) msgget$private(0x0, 0x100) 18:30:42 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x6, 0x1, 0x0, 0x0, &(0x7f0000000300)=[{}]}) 18:30:42 executing program 2: ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x0}) 18:30:42 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) r5 = msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = fork() msgctl$IPC_SET(r5, 0x1, &(0x7f0000006340)={{0x0, 0xee01, r6, 0x0, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r7}) 18:30:42 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$sndctrl(0x0, 0x0, 0x0) fork() 18:30:42 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) msgget$private(0x0, 0x100) 18:30:42 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f0000004300)={0x2020}, 0x2020) r5 = fork() getpgid(r5) 18:30:42 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x6, 0x1, 0x0, 0x0, &(0x7f0000000300)=[{}]}) 18:30:42 executing program 2: ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x0}) 18:30:42 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x6, 0x1, 0x0, 0x0, &(0x7f0000000300)=[{}]}) 18:30:42 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) r5 = msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = fork() msgctl$IPC_SET(r5, 0x1, &(0x7f0000006340)={{0x0, 0xee01, r6, 0x0, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r7}) 18:30:42 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() msgget$private(0x0, 0x100) 18:30:42 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f0000004300)={0x2020}, 0x2020) r5 = fork() getpgid(r5) 18:30:42 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x0}) 18:30:42 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 18:30:42 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x6, 0x1, 0x0, 0x0, &(0x7f0000000300)=[{}]}) 18:30:42 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) msgget$private(0x0, 0x100) 18:30:42 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x0}) 18:30:42 executing program 3: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() msgget$private(0x0, 0x100) 18:30:42 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x6, 0x1, 0x0, 0x0, &(0x7f0000000300)=[{}]}) 18:30:42 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) r5 = msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = fork() msgctl$IPC_SET(r5, 0x1, &(0x7f0000006340)={{0x0, 0xee01, r6, 0x0, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r7}) 18:30:42 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f0000004300)={0x2020}, 0x2020) r5 = fork() getpgid(r5) 18:30:42 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) msgget$private(0x0, 0x100) 18:30:42 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x0}) 18:30:42 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x6, 0x1, 0x0, 0x0, &(0x7f0000000300)=[{}]}) 18:30:43 executing program 3: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) msgget$private(0x0, 0x100) 18:30:43 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x0) msgget$private(0x0, 0x100) 18:30:43 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x0}) 18:30:43 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f0000004300)={0x2020}, 0x2020) getpgid(0x0) 18:30:43 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) msgget$private(0x0, 0x100) 18:30:43 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) r5 = msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r7 = fork() msgctl$IPC_SET(r5, 0x1, &(0x7f0000006340)={{0x0, 0xee01, 0x0, r6, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r7}) 18:30:43 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) msgget$private(0x0, 0x100) 18:30:43 executing program 3: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x0) msgget$private(0x0, 0x100) 18:30:43 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x0}) 18:30:43 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f0000004300)={0x2020}, 0x2020) getpgid(0x0) 18:30:43 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f0000004300)={0x2020}, 0x2020) getpgid(0x0) 18:30:43 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) msgget$private(0x0, 0x100) 18:30:43 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) r5 = msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r7 = fork() msgctl$IPC_SET(r5, 0x1, &(0x7f0000006340)={{0x0, 0xee01, 0x0, r6, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r7}) 18:30:43 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x0}) 18:30:43 executing program 3: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) r5 = msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r7 = fork() msgctl$IPC_SET(r5, 0x1, &(0x7f0000006340)={{0x0, 0xee01, 0x0, r6, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r7}) 18:30:43 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) msgget$private(0x0, 0x100) 18:30:43 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f0000004300)={0x2020}, 0x2020) getpgid(0x0) 18:30:43 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f0000004300)={0x2020}, 0x2020) getpgid(0x0) 18:30:43 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, 0x0) 18:30:43 executing program 4: msgget$private(0x0, 0x100) 18:30:43 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, 0x0) 18:30:43 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) r5 = msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r7 = fork() msgctl$IPC_SET(r5, 0x1, &(0x7f0000006340)={{0x0, 0xee01, 0x0, r6, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r7}) 18:30:43 executing program 3: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) msgget$private(0x0, 0x100) 18:30:43 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020) r5 = fork() getpgid(r5) 18:30:43 executing program 4: msgget$private(0x0, 0x0) 18:30:43 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f0000004300)={0x2020}, 0x2020) getpgid(0x0) 18:30:44 executing program 3: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) msgget$private(0x0, 0x100) 18:30:44 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, 0x0) 18:30:44 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f0000004300)={0x2020}, 0x2020) getpgid(0x0) 18:30:44 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) read$FUSE(r3, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r3, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r7 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, r5, r6, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r7}) 18:30:44 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020) r5 = fork() getpgid(r5) 18:30:44 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) 18:30:44 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f0000004300)={0x2020}, 0x2020) 18:30:44 executing program 3: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) msgget$private(0x0, 0x100) 18:30:44 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020) r5 = fork() getpgid(r5) 18:30:44 executing program 2: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020) r5 = fork() getpgid(r5) 18:30:44 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020) 18:30:44 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) msgget$private(0x0, 0x100) r5 = fork() getpgid(r5) 18:30:44 executing program 3: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:30:44 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) read$FUSE(r3, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r3, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r7 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, r5, r6, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r7}) 18:30:44 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020) 18:30:44 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020) 18:30:44 executing program 2: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020) 18:30:44 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) r5 = fork() getpgid(r5) 18:30:44 executing program 3: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:30:44 executing program 2: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020) 18:30:44 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) msgget$private(0x0, 0x100) 18:30:45 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r3, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r7 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, r5, r6, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r7}) 18:30:45 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) read$FUSE(r3, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r3, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r7 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, r5, r6, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r7}) 18:30:45 executing program 3: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 18:30:45 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) r5 = fork() getpgid(r5) 18:30:45 executing program 2: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020) 18:30:45 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) read$FUSE(r3, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r3, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r7 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, r5, r6, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r7}) 18:30:45 executing program 3: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 18:30:45 executing program 2: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020) 18:30:45 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) 18:30:45 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) r5 = fork() getpgid(r5) 18:30:45 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r3, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r6 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, r4, r5, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r6}) 18:30:45 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 18:30:45 executing program 2: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020) 18:30:45 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = fork() getpgid(r4) 18:30:45 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) r5 = fork() getpgid(r5) 18:30:45 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) 18:30:45 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() read$FUSE(r3, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r3, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r6 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, r4, r5, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r6}) 18:30:45 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 18:30:45 executing program 2: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) msgget$private(0x0, 0x100) read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020) 18:30:45 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) r5 = fork() getpgid(r5) 18:30:45 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = fork() getpgid(r4) 18:30:46 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r3, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r6 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, r4, r5, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r6}) 18:30:46 executing program 2: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) msgget$private(0x0, 0x100) 18:30:46 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) 18:30:46 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 18:30:46 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) r5 = fork() getpgid(r5) 18:30:46 executing program 2: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) socket$kcm(0x29, 0x5, 0x0) 18:30:46 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r4 = fork() getpgid(r4) 18:30:46 executing program 3: syz_io_uring_setup(0x3822, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 18:30:46 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) read$FUSE(r3, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r3, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r6 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, r4, r5, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r6}) 18:30:46 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() socket$kcm(0x29, 0x5, 0x0) 18:30:46 executing program 2: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f00000063c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x26) 18:30:46 executing program 3: syz_io_uring_setup(0x3822, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 18:30:46 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) fork() 18:30:46 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) r4 = fork() getpgid(r4) 18:30:46 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r1, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r4 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, r2, r3, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r4}) 18:30:46 executing program 3: syz_io_uring_setup(0x3822, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 18:30:46 executing program 2: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) 18:30:46 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) 18:30:46 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) 18:30:46 executing program 3: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 18:30:46 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x0) r2 = fork() getpgid(r2) 18:30:46 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r1, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r4 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, r2, r3, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r4}) 18:30:47 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:30:47 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) socket$kcm(0x29, 0x5, 0x0) 18:30:47 executing program 2: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, 0x0, 0x0) 18:30:47 executing program 3: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 18:30:47 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = fork() getpgid(r1) 18:30:47 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) 18:30:47 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r3 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, r1, r2, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r3}) 18:30:47 executing program 3: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 18:30:47 executing program 2: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:30:47 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:30:47 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r1 = fork() getpgid(r1) 18:30:47 executing program 3: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 18:30:47 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) 18:30:47 executing program 2: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:30:47 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r3 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, r1, r2, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r3}) 18:30:47 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = fork() getpgid(r0) 18:30:47 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:47 executing program 2: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:47 executing program 3: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 18:30:48 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = fork() getpgid(r0) 18:30:48 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$kcm(0x29, 0x5, 0x0) 18:30:48 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:48 executing program 1: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r3 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, r1, r2, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r3}) 18:30:48 executing program 3: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 18:30:48 executing program 5: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) socket$kcm(0x29, 0x5, 0x0) 18:30:48 executing program 2: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:48 executing program 0: r0 = fork() getpgid(r0) 18:30:48 executing program 1: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r3 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, r1, r2, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r3}) 18:30:48 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) fork() 18:30:48 executing program 3: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 18:30:48 executing program 5: socket$kcm(0x29, 0x5, 0x0) 18:30:48 executing program 0: fork() getpgid(0x0) 18:30:48 executing program 2: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:48 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x0) fork() 18:30:48 executing program 3: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 18:30:48 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r3 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, r1, r2, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r3}) 18:30:48 executing program 5: socket$kcm(0x29, 0x0, 0x0) 18:30:48 executing program 0: fork() getpgid(0x0) 18:30:48 executing program 3: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 18:30:48 executing program 2: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:30:48 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r3 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, r1, r2, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r3}) 18:30:48 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x0) fork() 18:30:48 executing program 5: socket$kcm(0x29, 0x0, 0x0) 18:30:48 executing program 0: fork() getpgid(0x0) 18:30:48 executing program 3: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 18:30:48 executing program 5: socket$kcm(0x29, 0x0, 0x0) 18:30:49 executing program 2: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:30:49 executing program 3: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 18:30:49 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r3 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, r1, r2, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r3}) 18:30:49 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:49 executing program 5: fork() getpgid(0x0) 18:30:49 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) fork() 18:30:49 executing program 2: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:30:49 executing program 3: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 18:30:49 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:49 executing program 2: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) fork() openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:30:49 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r3 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, r1, r2, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r3}) 18:30:49 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:30:49 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) fork() 18:30:49 executing program 3: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000200)) 18:30:49 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:49 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r3 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, r1, r2, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r3}) 18:30:49 executing program 2: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) fork() openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:30:49 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r3 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, r1, r2, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r3}) 18:30:49 executing program 3: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000200)) 18:30:49 executing program 4: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) fork() 18:30:49 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:49 executing program 2: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) fork() openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:30:50 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r3 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, r1, r2, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r3}) 18:30:50 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r3 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, r1, r2, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r3}) 18:30:50 executing program 3: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000200)) 18:30:50 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) fork() 18:30:50 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) fork() 18:30:50 executing program 2: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x0) fork() openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:30:50 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r3 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, r1, r2, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r3}) 18:30:50 executing program 3: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), 0x0) 18:30:50 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r3 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, r1, r2, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r3}) 18:30:50 executing program 4: fork() 18:30:50 executing program 2: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) fork() openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:30:50 executing program 3: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), 0x0) 18:30:50 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) 18:30:50 executing program 4: fork() 18:30:50 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r3 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, r1, r2, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r3}) 18:30:50 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:30:50 executing program 3: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), 0x0) 18:30:50 executing program 2: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) fork() openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:30:50 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) 18:30:50 executing program 4: fork() 18:30:51 executing program 3: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) fork() openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:30:51 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) 18:30:51 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r3 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, r1, r2, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r3}) 18:30:51 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) 18:30:51 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) fork() 18:30:51 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) fork() openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:30:51 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) 18:30:51 executing program 3: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) fork() openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:30:51 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) 18:30:51 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) 18:30:51 executing program 4: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) fork() 18:30:51 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r2 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, 0x0, r1, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r2}) 18:30:51 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) fork() openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:30:51 executing program 3: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) 18:30:51 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x0) 18:30:51 executing program 4: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) fork() 18:30:51 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) fork() 18:30:51 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:30:51 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r2 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, 0x0, r1, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r2}) 18:30:51 executing program 3: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) 18:30:51 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) fork() openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:30:52 executing program 4: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) fork() 18:30:52 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) fork() 18:30:52 executing program 3: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x1}, 0xfffffff7) 18:30:52 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:30:52 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) fork() openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:30:52 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r2 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, 0x0, r1, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r2}) 18:30:52 executing program 3: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x0) 18:30:52 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) fork() 18:30:52 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:30:52 executing program 2: syz_io_uring_setup(0x3f27, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) fork() openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:30:52 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) fork() [ 425.518708][T13173] ================================================================== [ 425.527148][T13173] BUG: KCSAN: data-race in compact_zone / compact_zone [ 425.534121][T13173] [ 425.536469][T13173] write to 0xffff88813fffc290 of 8 bytes by task 13168 on cpu 0: [ 425.544308][T13173] compact_zone+0x14b5/0x1e60 [ 425.549221][T13173] try_to_compact_pages+0x317/0x820 [ 425.554459][T13173] __alloc_pages_direct_compact+0x89/0x350 [ 425.560379][T13173] __alloc_pages_slowpath+0x5cb/0x9e0 18:30:52 executing program 2: syz_io_uring_setup(0x3f27, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) fork() openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) [ 425.565791][T13173] __alloc_pages_nodemask+0x26a/0x350 [ 425.571182][T13173] alloc_pages_current+0x21d/0x310 [ 425.576316][T13173] __get_free_pages+0x8/0x30 [ 425.581697][T13173] io_uring_create+0x8b6/0x1850 [ 425.587969][T13173] __x64_sys_io_uring_setup+0xe1/0x120 [ 425.594802][T13173] do_syscall_64+0x39/0x80 [ 425.599237][T13173] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 425.605327][T13173] [ 425.607683][T13173] read to 0xffff88813fffc290 of 8 bytes by task 13173 on cpu 1: [ 425.615564][T13173] compact_zone+0x1491/0x1e60 [ 425.620382][T13173] try_to_compact_pages+0x317/0x820 [ 425.625794][T13173] __alloc_pages_direct_compact+0x89/0x350 [ 425.631819][T13173] __alloc_pages_slowpath+0x2b5/0x9e0 [ 425.637305][T13173] __alloc_pages_nodemask+0x26a/0x350 [ 425.642936][T13173] alloc_pages_current+0x21d/0x310 [ 425.656013][T13173] __get_free_pages+0x8/0x30 [ 425.660903][T13173] io_uring_create+0x8b6/0x1850 18:30:52 executing program 2: syz_io_uring_setup(0x3f27, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) fork() openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:30:52 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fork() 18:30:52 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r3 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, r1, r2, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r3}) [ 425.665794][T13173] __x64_sys_io_uring_setup+0xe1/0x120 [ 425.671407][T13173] do_syscall_64+0x39/0x80 [ 425.675853][T13173] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 425.681832][T13173] [ 425.684172][T13173] Reported by Kernel Concurrency Sanitizer on: [ 425.690336][T13173] CPU: 1 PID: 13173 Comm: syz-executor.5 Not tainted 5.12.0-rc6-syzkaller #0 [ 425.699143][T13173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 425.709209][T13173] ================================================================== 18:30:52 executing program 3: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:30:52 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:30:52 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 18:30:52 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) fork() openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:30:53 executing program 3: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 18:30:53 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r3 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, r1, r2, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r3}) 18:30:53 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fork() 18:30:53 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 18:30:53 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:30:53 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) fork() openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:30:53 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:30:53 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r3 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, r1, r2, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r3}) 18:30:53 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:30:53 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:30:53 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) fork() openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:30:53 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) fork() openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:30:53 executing program 5: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:30:53 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:30:53 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:30:53 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r0, 0x0, 0x0) r2 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, r1, 0x0, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r2}) 18:30:53 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) fork() openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:30:53 executing program 5: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:30:53 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), 0x0) fork() openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:30:53 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:30:53 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:30:54 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r0, 0x0, 0x0) r2 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, r1, 0x0, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r2}) 18:30:54 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:30:54 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) fork() openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:30:54 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:30:54 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:30:54 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), 0x0) fork() openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:30:54 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r0, 0x0, 0x0) r2 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, r1, 0x0, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r2}) 18:30:54 executing program 3: syz_io_uring_setup(0x3f27, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:30:54 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) fork() 18:30:54 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:30:54 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:30:54 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), 0x0) fork() openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:30:54 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020) fork() msgctl$IPC_SET(0x0, 0x1, 0x0) 18:30:54 executing program 3: syz_io_uring_setup(0x3f27, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:30:54 executing program 4: fork() 18:30:54 executing program 0: syz_io_uring_setup(0x3f27, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:30:54 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:30:54 executing program 3: syz_io_uring_setup(0x3f27, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:30:54 executing program 0: syz_io_uring_setup(0x3f27, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:30:54 executing program 2: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) fork() openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) 18:30:54 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), 0x0) fork() openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:30:54 executing program 5: syz_io_uring_setup(0x3822, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:30:54 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 18:30:54 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020) fork() msgctl$IPC_SET(0x0, 0x1, 0x0) 18:30:55 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020) fork() msgctl$IPC_SET(0x0, 0x1, 0x0) 18:30:55 executing program 0: syz_io_uring_setup(0x3f27, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:30:55 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), 0x0) fork() openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:30:55 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 18:30:55 executing program 5: syz_io_uring_setup(0x3822, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:30:55 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 18:30:55 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020) fork() msgctl$IPC_SET(0x0, 0x1, 0x0) 18:30:55 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020) fork() msgctl$IPC_SET(0x0, 0x1, 0x0) 18:30:55 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), 0x0) fork() openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:30:55 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 18:30:55 executing program 5: syz_io_uring_setup(0x3822, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:30:55 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 18:30:55 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r2 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, 0x0, r1, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r2}) 18:30:55 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), 0x0) fork() 18:30:55 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), 0x0) 18:30:55 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020) fork() msgctl$IPC_SET(0x0, 0x1, 0x0) 18:30:55 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 18:30:55 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), 0x0) 18:30:55 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:30:55 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), 0x0) 18:30:55 executing program 5: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:30:55 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020) r1 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, 0x0, 0x0, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r1}) 18:30:55 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), 0x0) 18:30:56 executing program 3: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), 0x0) 18:30:56 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), 0x0) 18:30:56 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) fork() 18:30:56 executing program 5: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:30:56 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), 0x0) 18:30:56 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020) r1 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, 0x0, 0x0, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r1}) 18:30:56 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), 0x0) 18:30:56 executing program 3: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:30:56 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) fork() 18:30:56 executing program 0: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), 0x0) 18:30:56 executing program 5: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:30:56 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020) r1 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, 0x0, 0x0, 0x0, 0xe0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r1}) 18:30:56 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), 0x0) 18:30:56 executing program 3: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:30:56 executing program 5: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:30:56 executing program 2: fork() 18:30:56 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 18:30:56 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), 0x0) 18:30:56 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r2 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, 0x0, r1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r2}) 18:30:56 executing program 3: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:30:56 executing program 0: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 18:30:57 executing program 5: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:30:57 executing program 2: fork() 18:30:57 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), 0x0) 18:30:57 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r2 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, 0x0, r1}, 0x0, 0x0, 0xfff, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r2}) 18:30:57 executing program 0: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:30:57 executing program 3: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) 18:30:57 executing program 4: syz_io_uring_setup(0x3f27, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), 0x0) 18:30:57 executing program 5: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:30:57 executing program 2: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:30:57 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r2 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, 0x0, r1}, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r2}) 18:30:57 executing program 0: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:30:57 executing program 4: syz_io_uring_setup(0x3f27, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), 0x0) 18:30:57 executing program 3: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) 18:30:57 executing program 5: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:30:57 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r2 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, 0x0, r1}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r2}) 18:30:57 executing program 2: r0 = syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 18:30:57 executing program 4: syz_io_uring_setup(0x3f27, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), 0x0) 18:30:57 executing program 0: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:30:57 executing program 3: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) 18:30:57 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r2 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, 0x0, r1}, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r2}) 18:30:57 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r2 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, 0x0, r1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r2}) 18:30:58 executing program 5: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:30:58 executing program 4: syz_io_uring_setup(0x3f27, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) 18:30:58 executing program 3: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) fork() 18:30:58 executing program 0: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) fork() 18:30:58 executing program 4: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) 18:30:58 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r2 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, 0x0, r1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x2, 0x2, 0x0, r2}) 18:30:58 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r2 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, 0x0, r1}, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r2}) 18:30:58 executing program 5: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:30:58 executing program 3: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) fork() 18:30:58 executing program 4: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) 18:30:58 executing program 0: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) fork() 18:30:58 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r2 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, 0x0, r1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x2, 0x0, r2}) 18:30:58 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r2 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, 0x0, r1}, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r2}) 18:30:58 executing program 4: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) 18:30:58 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) fork() 18:30:58 executing program 5: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:30:58 executing program 0: fork() 18:30:58 executing program 4: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) 18:30:58 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:30:58 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r2 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, 0x0, r1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, r2}) 18:30:58 executing program 5: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:30:58 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) fork() 18:30:58 executing program 4: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 18:30:59 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r2 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, 0x0, r1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x2, 0x0, r2}) 18:30:59 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 18:30:59 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:30:59 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r2 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, 0x0, r1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, r2}) 18:30:59 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 18:30:59 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) fork() 18:30:59 executing program 5: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:30:59 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r2 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, 0x0, r1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x2, 0x0, r2}) 18:30:59 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:30:59 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x6fca, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 18:30:59 executing program 3: syz_io_uring_setup(0x3822, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) fork() 18:30:59 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r2 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, 0x0, r1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) 18:30:59 executing program 5: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:30:59 executing program 4: syz_io_uring_setup(0x3822, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 18:30:59 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r2 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, 0x0, r1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x2, 0x0, r2}) 18:30:59 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:30:59 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) r1 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01}, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r1}) 18:30:59 executing program 5: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:30:59 executing program 4: syz_io_uring_setup(0x3822, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 18:30:59 executing program 3: syz_io_uring_setup(0x3822, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) fork() 18:30:59 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, 0x0, r1}}) 18:30:59 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:30:59 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) r1 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01}, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r1}) 18:31:00 executing program 5: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:31:00 executing program 4: syz_io_uring_setup(0x3822, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 18:31:00 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) r1 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01}, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r1}) 18:31:00 executing program 1: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) fork() 18:31:00 executing program 3: syz_io_uring_setup(0x3822, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) fork() 18:31:00 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:31:00 executing program 4: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 18:31:00 executing program 5: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:31:00 executing program 1: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) fork() 18:31:00 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r2 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, 0x0, r1}, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r2}) 18:31:00 executing program 3: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) fork() 18:31:00 executing program 4: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 18:31:00 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) r1 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x2, 0x0, r1}) [ 433.462734][ T3239] ieee802154 phy0 wpan0: encryption failed: -22 [ 433.470048][ T3239] ieee802154 phy1 wpan1: encryption failed: -22 18:31:00 executing program 5: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:31:00 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r2 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, 0x0, r1}, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r2}) 18:31:00 executing program 3: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) fork() 18:31:00 executing program 1: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) fork() 18:31:00 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) r1 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x2, 0x0, r1}) 18:31:00 executing program 4: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 18:31:00 executing program 5: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:31:00 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r2 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, 0x0, r1}, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r2}) 18:31:00 executing program 1: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:31:00 executing program 4: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 18:31:00 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) r1 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x2, 0x0, r1}) 18:31:01 executing program 3: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) fork() 18:31:01 executing program 2: read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r1 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, 0x0, r0}, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r1}) 18:31:01 executing program 4: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 18:31:01 executing program 5: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:31:01 executing program 1: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:31:01 executing program 3: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x0, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) fork() 18:31:01 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r2 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, 0x0, r1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x2, 0x0, r2}) 18:31:01 executing program 2: read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r1 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, 0x0, r0}, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r1}) 18:31:01 executing program 4: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 18:31:01 executing program 5: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:31:01 executing program 1: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) fork() 18:31:01 executing program 3: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x0, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) fork() 18:31:01 executing program 2: read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r1 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, 0x0, r0}, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r1}) 18:31:01 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r2 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, 0x0, r1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x2, 0x0, r2}) 18:31:01 executing program 4: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 18:31:01 executing program 5: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) fork() 18:31:02 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r2 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, 0x0, r1}, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x9, 0x2, 0x2, 0x2, 0x2, 0x0, r2}) 18:31:02 executing program 1: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) 18:31:02 executing program 3: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x6fca, 0x0, 0x2, 0xc7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) fork() 18:31:02 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r2 = fork() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000006340)={{0x0, 0xee01, 0x0, r1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x2, 0x0, r2}) 18:31:02 executing program 4: syz_io_uring_setup(0x3822, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200))