ng program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) 19:22:07 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0xf44) 19:22:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x60000000) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) [ 397.313261][T16376] binder: 16373:16376 unknown command 0 [ 397.336616][T16376] binder: 16373:16376 ioctl c0306201 20000440 returned -22 19:22:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') fsetxattr(r0, &(0x7f0000000000)=@random={'os2.', '\x00'}, &(0x7f00000000c0), 0x0, 0x3) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8) [ 397.374045][T16380] device eql entered promiscuous mode 19:22:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x630d, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) sendfile(r0, r0, &(0x7f0000000040), 0x3ff) [ 397.483042][T16389] binder: 16388:16389 unknown command 0 [ 397.493646][T16389] binder: 16388:16389 ioctl c0306201 20000440 returned -22 19:22:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40046302, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:07 executing program 2: gettid() getpgid(0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)=0x0) r2 = fcntl$getown(0xffffffffffffff9c, 0x9) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x40, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, 0xffffffffffffff9c, 0x0, 0x9b, &(0x7f0000000140)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9'}, 0x30) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4) r5 = getpgid(r2) r6 = syz_open_procfs(r5, &(0x7f0000000240)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') fsetxattr(r6, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000300)={0xc41d}) [ 397.605343][T16396] binder: BC_ACQUIRE_RESULT not supported [ 397.625973][T16396] binder: 16393:16396 ioctl c0306201 20000440 returned -22 19:22:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40046304, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:07 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) [ 397.819457][T16408] binder: 16407:16408 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 397.854498][T16408] binder: 16407:16408 unknown command 0 [ 397.887341][T16408] binder: 16407:16408 ioctl c0306201 20000440 returned -22 19:22:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x200000000000000, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 19:22:08 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) 19:22:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40046307, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:08 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0xf46) 19:22:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x100000000000000) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) [ 398.181580][T16421] binder: 16420:16421 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 398.207273][T16421] binder: 16420:16421 unknown command 0 [ 398.212997][T16421] binder: 16420:16421 ioctl c0306201 20000440 returned -22 19:22:08 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x2000, 0x0) bind$isdn(r0, &(0x7f0000000100)={0x22, 0x2, 0xb39, 0x800, 0x3}, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') fsetxattr(r1, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) bind$isdn(r1, &(0x7f0000000040)={0x22, 0x0, 0xfc, 0x9}, 0x6) [ 398.248260][T16432] device eql entered promiscuous mode 19:22:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:08 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') write$P9_RLERRORu(r0, &(0x7f0000000040)={0xd, 0x7, 0x1, {{}, 0x1}}, 0xd) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000240)) fsetxattr(r0, &(0x7f0000000000)=@random={'system.', '\x00'}, &(0x7f00000000c0)=' ', 0x1, 0x0) [ 398.346369][T16441] binder: 16440:16441 BC_FREE_BUFFER u0000000000000000 no match [ 398.361620][T16441] binder: 16440:16441 unknown command 0 [ 398.382943][T16441] binder: 16440:16441 ioctl c0306201 20000440 returned -22 19:22:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x4008630a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:08 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x2000, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000080)=0x20, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') fsetxattr(r1, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) statx(r0, &(0x7f0000000100)='./file0\x00', 0x6000, 0x0, &(0x7f0000000240)) [ 398.543713][T16449] binder: BC_ATTEMPT_ACQUIRE not supported [ 398.586911][T16449] binder: 16448:16449 ioctl c0306201 20000440 returned -22 19:22:08 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x80, 0x0) fcntl$setsig(r0, 0xa, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:22:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40086310, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 398.789868][T16465] binder: 16461:16465 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 398.817158][T16465] binder: 16461:16465 unknown command 0 [ 398.822916][T16465] binder: 16461:16465 ioctl c0306201 20000440 returned -22 19:22:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x800000000000000, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 19:22:09 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0x1, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000080)={0x0, @rand_addr, @multicast2}, &(0x7f0000000100)=0xc) accept4$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f0000000240)=0x14, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@dellink={0x80, 0x11, 0x20, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x10, 0x4c040}, [@IFLA_CARRIER={0x8, 0x21, 0x4}, @IFLA_PHYS_PORT_ID={0x24, 0x22, "7e943b20954251539f61d363a52f2f4680bd250f6d3ed69f90e0888fa430c43b"}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x3}, @IFLA_IFALIAS={0x14, 0x14, 'team0\x00'}, @IFLA_EXT_MASK={0x8, 0x1d, 0x100000000}, @IFLA_IF_NETNSID={0x8}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 19:22:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x400c630e, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x200000000000000) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) 19:22:09 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0xf48) 19:22:09 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000100)={0x13, 0x10, 0xfa00, {&(0x7f0000000240), r1, 0x3}}, 0x18) fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) [ 399.110511][T16479] binder: 16471:16479 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 399.141214][T16479] binder: 16471:16479 unknown command 0 [ 399.147213][T16479] binder: 16471:16479 ioctl c0306201 20000440 returned -22 [ 399.186312][T16484] device eql entered promiscuous mode 19:22:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x400c630f, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:09 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x208002, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = syz_open_procfs(r1, &(0x7f0000000240)='/exe\x00\x00\x00\x00\x00\x87\xd5BW\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\x05\x8a7~\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x00\x00\x00\x00\x00\x00Qq\xa9\x00\x00\x00\xc0\xdfl=Z\xff\xcf\xb5\xf0.\x1b\xd9u]\xc1\x13S:\x8f\x93\x907d\x80R\t\xe1\x1b\xaa\x00\x95\xb7\x02\xa6\xbb\x82W\xe8\xa8\x9a`\xf9\xb8\x8cK\xa4\xb6*g\xa3\x8f\r\xa66b\xc6R\x95\xb4`\xe5\xed\xd7\x165dK\xc2}\xa7\x95$\xd1\xd9\x93\x15M\xe5Qo\xee\xc9\xbc\xf9\xdf\xae\"\xc1\xd0\xbb\xfe\xd6\b\x89') getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e22, 0x1, @remote, 0x7ff}}}, &(0x7f0000000080)=0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e22, 0x0, @empty}}}, &(0x7f00000001c0)=0x84) fsetxattr(r2, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) [ 399.293563][T16492] binder: 16490:16492 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 399.312384][T16492] binder: 16490:16492 unknown command 0 [ 399.326919][T16492] binder: 16490:16492 ioctl c0306201 20000440 returned -22 19:22:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:09 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x40010, r0, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0x1, 0x3) [ 399.495400][T16464] vivid-003: kernel_thread() failed [ 399.495846][T16503] binder: 16497:16503 BC_INCREFS_DONE u0000000000000000 no match [ 399.533004][T16503] binder: 16497:16503 unknown command 0 19:22:09 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) close(r0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) [ 399.545734][T16503] binder: 16497:16503 ioctl c0306201 20000440 returned -22 19:22:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40106309, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 399.703828][T16516] binder: 16512:16516 BC_ACQUIRE_DONE u0000000000000000 no match [ 399.738012][T16516] binder: 16512:16516 unknown command 0 [ 399.753748][T16516] binder: 16512:16516 ioctl c0306201 20000440 returned -22 19:22:09 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000240)={0x2, 0xffffffffffffff9c}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000100)={0x100000, &(0x7f0000000080), 0x1, r0, 0x1}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000140)={0x0, r0}) 19:22:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40402500, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x1000000000000000, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 19:22:09 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0xf4f) 19:22:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x800000000000000) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) 19:22:09 executing program 2: r0 = accept4$packet(0xffffffffffffff9c, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14, 0x80800) pwritev(r0, &(0x7f0000000480)=[{&(0x7f0000000100)="c1b4e1c9a8daec67eb662c38e8e64709167ebe9fa37a6edb019e48bad9c2d89ec3194629868e3028c3d5d0a1dd7153354a94b11b7bb05b1fa4d7b38c018f220122", 0x41}, {&(0x7f0000000240)="742bd4229da19d0a24e02aa1610c2171894ea8f594f119ff70e05370a2aeac0041d1d319418a2e63cf18db352a8e2bd2217fee82898693ec6b5573f0a576c3422b4b3ae8c600facad602a8110331fcc0a860b09c8eb2f7c8893034defe0c82be09c54a6e8644cdc1e701eaba2fb103cdcb361690aea07c8fe61c6865249cff63a1abce1a37489d863fa24f1a45b198fe2cbe6260e0e3a7a516204f45d4", 0x9d}, {&(0x7f0000000300)="5f71269d0c5613aa7a68171e7eb6fd5b2a0951462824b6ecc3203378af5df00b568113557e9b7ce7929d284d0a8089943a41a52efc9855f4936ed79e4b643e9d0be1d46dabb68f77d5b238355fd76d80b8191f688c4427da83f91b53cb029658d6fe0843c73f38ad458edac6b74ce3a62c82d20b8463f432be84c61879774186bd4bcb4f8bb8c3f3924f84ed340144ebb140af8c2e8e6f7fd2bee1982e093d4e93f23bec5891109f1c560fa14fa967ffc7792b60f399846f5a676fc09920bf81ea09b981204cd2847c98007fe4cf1d0d1065e1c52eab3d460c3ca3e941d10e470d8e3fc96daeea", 0xe7}, {&(0x7f0000000400)="8299aba92be5a5d779ac68cfa21f1a140ec5d85822841f0679078bfa26837faa978cd5fe13eeabc54e1aac44d79fc93e26a429bc909136ed2fbbe95ebe00e1519831ab6021663c672917ac2d38f394d5f7f35fd7bfb5ca05c306fc8c90e27849a94dc50a81edb8fb7d60536675b4a58dcb7bb681", 0x74}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') fsetxattr(r1, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) [ 399.990423][T16527] binder: 16521:16527 unknown command 1077945600 [ 400.032411][T16527] binder: 16521:16527 ioctl c0306201 20000440 returned -22 19:22:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/sco\x00') ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f0000000040)) fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) [ 400.152913][T16539] device eql entered promiscuous mode [ 400.203073][T16542] binder: 16540:16542 got reply transaction with no transaction stack [ 400.225327][T16542] binder: 16540:16542 transaction failed 29201/-71, size 24-0 line 2808 [ 400.242062][T16542] binder: 16540:16542 ioctl c0306201 20000440 returned -14 19:22:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406302, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) [ 400.361630][T16550] binder: 16549:16550 unknown command 1077961474 [ 400.374467][T16550] binder: 16549:16550 ioctl c0306201 20000440 returned -22 19:22:10 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x100000000, 0x4}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={r3, 0x8}, &(0x7f00000001c0)=0x8) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:22:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') fsetxattr(r0, &(0x7f0000000240)=@random={'user.', '/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9'}, &(0x7f0000000040)='\x00', 0x1, 0x0) [ 400.511792][T16561] binder: 16557:16561 unknown command 1077961475 19:22:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') fsetxattr(r0, &(0x7f0000000240)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000100)='}\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0x7, 0x34324142, 0x0, 0x2, 0x3, @discrete={0x4, 0x9d1}}) [ 400.556767][T16561] binder: 16557:16561 ioctl c0306201 20000440 returned -22 19:22:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x3f00000000000000, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 19:22:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406304, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) dup2(r0, r0) 19:22:10 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0xf51) 19:22:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x1000000000000000) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) [ 400.853340][T16577] binder: 16576:16577 unknown command 1077961476 [ 400.873211][T16577] binder: 16576:16577 ioctl c0306201 20000440 returned -22 19:22:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406305, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:10 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x4000, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='vegas\x00', 0x6) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x1, 0x10}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={r1, 0x3}, &(0x7f0000000240)=0x8) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000280)={@initdev, @broadcast}, &(0x7f00000002c0)=0xc) ioctl$RTC_UIE_ON(r0, 0x7003) socket(0xd, 0x6, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000340)={0x6b4, 0x7, 0x52ec, 0x512d, 0x9}) fsetxattr(r2, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) [ 401.004172][T16591] device eql entered promiscuous mode 19:22:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 401.063028][T16597] binder: 16593:16597 unknown command 1077961477 [ 401.089547][T16597] binder: 16593:16597 ioctl c0306201 20000440 returned -22 [ 401.214540][T16603] binder: 16602:16603 unknown command 1077961478 [ 401.221207][T16603] binder: 16602:16603 ioctl c0306201 20000440 returned -22 19:22:11 executing program 1: socket$inet6(0xa, 0x5, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x60000000, 0x600) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000140)={0x8, 0x3, 0x2, 0x5, '\x00', 0x3f}) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:22:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000040)='\x00', 0x1, 0x0) 19:22:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406307, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 401.417558][T16609] binder: 16606:16609 unknown command 1077961479 19:22:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') write$binfmt_elf64(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x3b7c, 0x7fff, 0x40, 0x0, 0x1ff, 0x3, 0x7, 0x6a1, 0x127, 0x40, 0x2e1, 0x1, 0xffffffffffffffff, 0x38, 0x2, 0x0, 0x8, 0xfff}, [{0x1, 0x80, 0x79f074f3, 0x0, 0xffffffffffff8000, 0xecd, 0x1}], "cc1da0ff4d00c5e1809c973d3d419a51512f4a658e5fde05ca2f55cb858e6c3cdadac72fbf829808c5e72b847c7cbc9c207d18fd530f5c190be747c02d4c230b54fb8f4d274abc6dd010c8e1889447cc126f19bed3f45c4ed6667b38cb248fe53b2027e91f26dba33a5dd64c87223bb0c0da568e41cb551f6c4138458067ecaf55184738eddb55e94ce9b059e8fc45cbb765b64a6f59f9919d9edeb8fe430d8bafafbb04e5df4e6bcc453f86a2da9713492bb7d64e98eaaff316147f5b5ba335176e414c0e4a2235e6ecbcb979252a263e7606224fbeba71ca01b33f2cc858fb7e5e217657c4b985c92e70b466dc4ea2a57012549ea7f4", [[], [], [], [], [], [], [], []]}, 0x96f) rt_sigaction(0x19, &(0x7f0000000240)={&(0x7f0000000100)="6666410f5dac9900000000c482399a67022e410fc76500400ff1140b460f84d3000000f2400f5ac4d9ed430f01c23e667a448f6978d3de", {0xff}, 0x2, &(0x7f0000000140)="6766420f381d7c48006667660f3832a43d428613134630b300080000c4c179d7c36667debbaa1aacb3a5f241adc4811e5fd5c423716f66b70a671502000000"}, 0x0, 0x8, &(0x7f0000000280)) syz_open_dev$dspn(&(0x7f00000004c0)='/dev/dsp#\x00', 0xfffffffffffffff9, 0x4000) fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0xa7, 0x4) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x1a1000, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000000480)={0x2, 0xb73, &(0x7f00000002c0)="8e7b8c49bb19d0c9d3dd68baf335b95ff4417aba67d15f79d4e4497f32c5b8cf3df5630900d2ade20ccc08c16cab80fb6fbb2533e2ab767872cff6038a900818549a4f6c2442457cd82279e8625179c5fe2596d2edc5fda0cf6c10515862fe351544b002b90abe90aa1ff96e1216a9ca933a92fbd067ed279ca31e7ec6f4d25250c0485bc9634cca7b8b92b3b7a09cad9161c5", &(0x7f0000000380)="7561bfdb65da30ecbc38c42093d98157bed44ea78f2899b701911f0e6175b8e947d4ef3c026259ffda05e0fa7db4b47421b23fff113ff2bd9087c62d25bb3617e8a58eade50a72d2e8d5a2216db6ceed5449e74fae81649c0bab09c34d8fca8ed1b5a670a9445aa78d216d951efbd98b9f2380dadc884bc084d6e45ca2d33011e175f91ecf0c94340a8e82bb17138ce94eabc123d3eacb523ab3b3228dadffb85c879552d982819a6eb8f726c3580d02a830dc13d8fc130892018bb397f68c50380adf0539176aab60ba1492c0795df3fc2c7f6156ce8ffdd57ab6b5d221af6bc99972765f780ee9cc6501b53d7a65", 0x93, 0xef}) [ 401.464382][T16609] binder: 16606:16609 ioctl c0306201 20000440 returned -22 [ 401.515290][T16609] binder: 16606:16609 unknown command 1077961479 [ 401.535555][T16609] binder: 16606:16609 ioctl c0306201 20000440 returned -22 19:22:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x4000000000000000, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 19:22:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') fsetxattr(r0, &(0x7f0000000040)=@known='user.syz\x00', &(0x7f0000000080)='\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x7}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r1, 0x8}, 0x8) 19:22:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x2000000000000000) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) 19:22:11 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0xf58) 19:22:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x4040630a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:11 executing program 2: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000240)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdaP\xaf+u\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbch\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11N5\xd2_\x90\xb5=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='n\x19kH@\xe6\xf1,et/raw6\x00') getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000011c0)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f00000012c0)=0xe8) recvfrom$packet(r1, &(0x7f0000000100)=""/4096, 0x1000, 0x1, &(0x7f0000001300)={0x11, 0x5, r2, 0x1, 0x1, 0x6, @local}, 0x14) fsetxattr(r1, &(0x7f0000000000)=@known='trusted.overlay.origin\x00', &(0x7f00000000c0)='\x00', 0x1, 0x0) [ 401.990159][T16646] binder: 16644:16646 unknown command 1077961490 [ 402.006321][T16646] binder: 16644:16646 ioctl c0306201 20000440 returned -22 19:22:12 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0xfffe, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:22:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) fallocate(r0, 0x3a, 0x9, 0xffffffffffffffe1) 19:22:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406348, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 402.286337][T16656] binder: 16655:16656 unknown command 1077961544 [ 402.293027][T16656] binder: 16655:16656 ioctl c0306201 20000440 returned -22 19:22:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x3f00000000000000) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) [ 402.499628][T16670] device eql entered promiscuous mode 19:22:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x8000000000000000, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 19:22:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x4040634c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9\x1c\xa2S6\x01\nSO\xa9\x921\x8f\xc8\x130\xb2') fsetxattr(r0, &(0x7f0000000140)=@random={'btrfs.', '\x00'}, &(0x7f0000000040)='\x806\xcd\xeb$\x04\\e\x96\x025\x9f\xf7\xd3\x8bj/1og\x00\x00\x00\xe0\x8cZy&\aA\xa0\xe5X\xac1\x119\x1f\xe4\xc8\xf6C\xe0\xdd3\x11\x96 \xde\aw\xb9@O\xabU+Bf\x94\x98\xc5.\xf5\xfc]\x1f\xfb\xd7\x18', 0x46, 0xfffffffffffffffd) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000380)={0x4, 0x3}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b040020a2e22b321aeeca724001000000c80e000001000000"]) 19:22:12 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0xf5a) 19:22:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x6000000000000000) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) 19:22:12 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') fsetxattr(r1, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) [ 402.769034][T16684] binder: 16676:16684 unknown command 1077961548 [ 402.790123][T16684] binder: 16676:16684 ioctl c0306201 20000440 returned -22 19:22:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406368, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 402.922315][T16694] device eql entered promiscuous mode 19:22:12 executing program 2: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x0, 0x204000) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000080)) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000280)) fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) timer_create(0x7, &(0x7f0000000100)={0x0, 0x34, 0x2}, &(0x7f0000000140)=0x0) timer_gettime(r1, &(0x7f0000000240)) [ 402.963539][T16696] binder: 16695:16696 unknown command 1077961576 [ 402.973761][T16696] binder: 16695:16696 ioctl c0306201 20000440 returned -22 19:22:13 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:22:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x4040636c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') fsetxattr(r0, &(0x7f0000000080)=@random={'security.', 'eth0vboxnet0-\x00'}, &(0x7f0000000040)='\x00', 0xfffffffffffffffd, 0x0) [ 403.180796][T16709] binder: 16707:16709 unknown command 1077961580 [ 403.206233][T16709] binder: 16707:16709 ioctl c0306201 20000440 returned -22 19:22:13 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)=[0x6, 0xfffffffffffffc01]) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') fsetxattr(r1, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) [ 403.228955][T16709] binder: 16707:16709 unknown command 1077961580 [ 403.280428][T16709] binder: 16707:16709 ioctl c0306201 20000440 returned -22 19:22:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x8dffffff00000000, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 19:22:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406374, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x10001, 0xffffffff, [], &(0x7f0000000040)=0x3}) fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) 19:22:13 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0xf5c) 19:22:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'bond_slave_0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x29}}}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400002, 0x0) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, &(0x7f0000000140)) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) fallocate(r1, 0x2, 0x0, 0x75) 19:22:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x4040637a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) write$P9_RSYMLINK(r0, &(0x7f0000000080)={0x14, 0x11, 0x2, {0x80, 0x3, 0x4}}, 0x14) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) [ 403.651853][T16733] binder: 16728:16733 unknown command 1077961588 [ 403.658993][T16733] binder: 16728:16733 ioctl c0306201 20000440 returned -22 [ 403.689851][T16736] device eql entered promiscuous mode [ 403.768782][T16742] binder: 16739:16742 unknown command 1077961594 [ 403.794410][T16742] binder: 16739:16742 ioctl c0306201 20000440 returned -22 19:22:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 403.953563][T16748] binder: 16747:16748 transaction failed 29189/-22, size 24-0 line 2903 19:22:14 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) exit(0x1) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) 19:22:14 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000100)=0x1ff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') fsetxattr(r1, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) [ 404.017167][T16748] binder: 16747:16748 ioctl c0306201 20000440 returned -14 19:22:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:14 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) uname(&(0x7f0000000240)=""/237) [ 404.215130][T16763] binder: 16760:16763 got reply transaction with no transaction stack [ 404.251443][T16763] binder: 16760:16763 transaction failed 29201/-71, size 24-0 line 2808 [ 404.292764][T16763] binder: 16760:16763 ioctl c0306201 20000440 returned -14 19:22:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0xf0ffffff00000000, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 19:22:14 executing program 2: getpgid(0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x80, 0x400) syncfs(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000380)='cpuset\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000140)={{0x100, 0x7}, {0x0, 0x3}, 0x1, 0x7, 0x7}) r2 = syz_open_procfs(r1, &(0x7f0000000240)='/exe\x00@\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xca\"\x87\xcb\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x11S\xba@\xf2h\t\xa9Qq\xa9kb\x8a\xect\xf4\x9b\x13\f\xcb\xcb;\xd1\xae\xd2\x00\xf3\xe9\b\xfb=\r\x87;\\p\xae\x03\xa2\x95l\xe4\x037\xfd\xf4o\x95\xba\xc6<\x1a\xb7\xdc\x0f\x1aj3d\v\xd0\x97\x06\xa4\xdc\xdb\xfd\xe4&\xd3Z\xc9\xbb\xda\xcf\x1a\xe7\xeb\xd9\xbb\xb4\xf6\x1c\xf6\x14\\\xcd\xa6\xebK4=Cy<\f7-\x1b\x88\xe4\xba\x81\xc6s\x16\xdd\xba\xc0\x01;d\x19M\xa1G\x8dl\x81\x89M8i\x8enX*\xafv\x19\xb2\x94a\xc0\xa5\x10&\xa1\x92\x18\x11U9\xff\xa2\x80]\xe0\xb5a\x8e9\x1a1\xf3\xb2\xe1\x1dZ\xdd') fsetxattr(r2, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) 19:22:14 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0xf5e) 19:22:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x91b-\xaa\x00', 0x200000000005002}) preadv(r3, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000240)=""/121) ioctl$sock_ifreq(r2, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) r4 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xfffffffffffffda7, 0x0) setsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f00000001c0)=0xa5, 0x4) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r1, &(0x7f0000000140)={0x80000006}) 19:22:14 executing program 2: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x40000, 0x0) accept$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400020}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=@ipv6_newaddr={0x54, 0x14, 0x0, 0x70bd27, 0x25dfdbfb, {0xa, 0x80, 0x410, 0xfe, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x4, 0x0, 0x2, 0xc9d}}, @IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IFA_LOCAL={0x14, 0x2, @rand_addr="ee68d34f77a95a084a14396dc3928caf"}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000140)={0x77, 0xffffffffffff0001, 0xc77, 0x3, 0x9}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000300)='/\x00'}, 0x30) ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) r4 = syz_open_procfs(r3, &(0x7f0000000440)='net/netstat\x00') bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)={&(0x7f00000001c0)='./file0\x00'}, 0x10) fsetxattr(r4, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0x10e7, 0x0) [ 404.512478][T16784] binder: 16777:16784 got transaction to invalid handle [ 404.570893][T16784] binder: 16777:16784 transaction failed 29201/-22, size 24-0 line 2903 19:22:14 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x68, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x0, @media='udp\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4000) fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) [ 404.620418][T16784] binder: 16777:16784 ioctl c0306201 20000440 returned -14 [ 404.646311][T16784] binder: 16777:16784 got transaction to invalid handle 19:22:14 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@ipv4={[], [], @multicast1}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team0\x00', r1}) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') fsetxattr(r2, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) fstat(r2, &(0x7f0000000240)) [ 404.690036][T16784] binder: 16777:16784 transaction failed 29201/-22, size 24-0 line 2903 [ 404.717762][T16784] binder: 16777:16784 ioctl c0306201 20000440 returned -14 19:22:14 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x7ff) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) 19:22:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:14 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') fsetxattr(r0, &(0x7f0000000040)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0x1, 0x3) 19:22:14 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0xf60) [ 405.054446][T16819] binder: 16814:16819 got transaction to invalid handle [ 405.087439][T16819] binder: 16814:16819 transaction failed 29201/-22, size 24-0 line 2903 [ 405.104010][T16819] binder: 16814:16819 ioctl c0306201 20000440 returned -14 19:22:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0xf500000000000000, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 19:22:15 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') fsetxattr(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="73797374656d2e756365722e73327a00cf92968b907e42cf2be82ecb0625b2bba3d7c06d1f5a75784f0565c29c9059ac7190bfefe6f14475a6c88f5de264886f1e24ab94bd0a44ea91"], &(0x7f00000000c0)='\x00', 0x1, 0x0) 19:22:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:15 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="2e0000001a008100a00f80ecdb4cb9040a4865160b000000d4126efb12000300ac14141d40d819a9ffe200000000", 0x2e}], 0x1}, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000440)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r3, 0x1000000) sendfile(r1, r3, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f00000001c0)) bind$alg(0xffffffffffffffff, 0x0, 0x0) timer_create(0x7, &(0x7f0000000140)={0x0, 0x37, 0x2, @thr={&(0x7f0000000040)="fc2a", &(0x7f0000000240)="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"}}, &(0x7f0000000180)=0x0) timer_delete(r4) 19:22:15 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0xf62) 19:22:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x8000}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f0000000240)={0x2, 0x10001, 0x6}) preadv(r2, &(0x7f0000000100), 0x1ef, 0x4000000001) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x800, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r4, 0x800442d4, &(0x7f0000000140)=0x7) [ 405.442215][T16838] netlink: 'syz-executor1': attribute type 3 has an invalid length. [ 405.462325][T16846] binder: 16841:16846 got transaction to invalid handle 19:22:15 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x80000, 0x0) write$vnet(r0, &(0x7f0000000100)={0x1, {&(0x7f0000000240)=""/232, 0xe8, &(0x7f0000000340)=""/243, 0x3}}, 0x68) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') fsetxattr(r1, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) [ 405.485841][T16846] binder: 16841:16846 transaction failed 29201/-22, size 24-0 line 2903 [ 405.500082][T16850] Sensor A: ================= START STATUS ================= [ 405.514809][T16846] binder: 16841:16846 ioctl c0306201 20000440 returned -14 19:22:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 405.539718][T16850] Sensor A: Test Pattern: 75% Colorbar [ 405.555731][T16850] Sensor A: Vertical Flip: false 19:22:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0adc1f023c123f3188a070a364e37b271186c537517c9a485f0f3b423356c18724b5fe79119fa6f830881fc8ef7d3974ef078105f3c840acc109c5aa80faab6aac2ee4a306d8e61b6738a92e9ede77654e860f85e0951907d5c467083d5d473b6bb52c461e5d560c56648de1769245e54d98e4f192a9b28b2c1401c9d7418eaa79f82f4712541664d6898aa605f39e96e6500f7343d703f3c08a17291c088bcd39e0bd9b248b48748dd4218ec1c9dfaf2be3e940817e4f8d5e4135251e658982910d4980a770a9d3d62a747fd72ba39fcbecc5c6b884000000000000008d581929b5134ef4fcc37d7ba91e11ac2dd71773ce71") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="246646f8a119d2a04f0500000000000000fb9ad9ac260610", @ANYRES16=r4, @ANYBLOB="080025bd7000fcdbdf250800000008000600060000000800040000010000"], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x4814) 19:22:15 executing program 2: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') fsetxattr(r1, &(0x7f00000003c0)=@known='security.apparmor\x00', &(0x7f0000000100)='\x01*d\xdb\xab^\xcalf\xfd\xb2\xb7\xe0:\xc6\xc9\xcd\x9a\x94b\xd2\xcb\x8b\x89\xb1%xq4\xd55;OB\xc1\xf6\xb6\xad\xec\xac\xe1\xc4\x99yx\xce&\xf1~\xfan\xd4e\xc4t\x88\x04\xb6?\x02\x9fVw\x8a3\xc1\x9b*8\xf3\xd2\xc3\xa5\xe1>\xd8\xf7\xe37\xda\xb6\x9eu\x16\xc4\x8b\xc9\x12\xd8\xe5\xd1?\xb2\xcb', 0x2a, 0x0) [ 405.602680][T16850] Sensor A: Horizontal Flip: false [ 405.667734][T16850] Sensor A: Brightness: 128 [ 405.690694][T16850] Sensor A: Contrast: 128 [ 405.695341][T16850] Sensor A: Hue: 0 [ 405.699413][T16850] Sensor A: Saturation: 128 [ 405.704220][T16850] Sensor A: ================== END STATUS ================== [ 405.724837][T16870] binder: 16868:16870 got transaction to invalid handle 19:22:15 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x4, 0x0) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000080)={0xfffffffffffffffb, "a6144498903eff4aaf3f1f0d3ce25b9aa6b577c0c3709695c2e284099fd7bb72", 0x2, 0x1}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') fsetxattr(r1, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) [ 405.737576][T16870] binder: 16868:16870 transaction failed 29201/-22, size 24-0 line 2903 [ 405.748623][T16870] binder: 16868:16870 ioctl c0306201 20000440 returned -14 [ 405.787772][T16876] device eql entered promiscuous mode 19:22:15 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) fsetxattr(r0, &(0x7f0000000080)=@random={'os2.', '/dev/video0\x00'}, &(0x7f00000000c0)='\x00', 0x1, 0x0) 19:22:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0xff01000000000000, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 19:22:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:16 executing program 2: fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x82, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) [ 406.217523][T16850] netlink: 'syz-executor1': attribute type 3 has an invalid length. [ 406.255702][T16838] Sensor A: ================= START STATUS ================= [ 406.306528][T16891] binder: 16890:16891 got transaction to invalid handle [ 406.311921][T16838] Sensor A: Test Pattern: 75% Colorbar [ 406.316059][T16891] binder: 16890:16891 transaction failed 29201/-22, size 24-0 line 2903 [ 406.320260][T16838] Sensor A: Vertical Flip: false [ 406.333932][T16838] Sensor A: Horizontal Flip: false [ 406.334238][T16891] binder: 16890:16891 ioctl c0306201 20000440 returned -14 [ 406.339367][T16838] Sensor A: Brightness: 128 [ 406.349694][T16891] binder: 16890:16891 got transaction to invalid handle [ 406.364419][T16891] binder: 16890:16891 transaction failed 29201/-22, size 24-0 line 2903 [ 406.364568][T16838] Sensor A: Contrast: 128 [ 406.373507][T16891] binder: 16890:16891 ioctl c0306201 20000440 returned -14 [ 406.379172][T16838] Sensor A: Hue: 0 19:22:16 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x6, 0x10000) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000140)={'hwsim0\x00', @local}) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) sendto$llc(r1, &(0x7f0000000240)="ba230bab5cbacbc3e747196d52083074c651392234acaa0232924fef72895de9afce5c6197aa3075198221aaaa80dff678acf5f7d98a5362b203cc3be7560bb0582ff77f442a88f1b84ceee0b48b985c6bfcefc9dbb9bd41b573a2c0917e8f95287d175753ae2c411ebf957e7277290fb53d2f524592d1bedecaff188d091e6861d32d117734f324b8b4ad394e14bfe750c1c929cbb0bf7e13e525d39d7718ba9fd2d5660a12ef3fa501d96d377d08db2d58efa110cd0af42d214c0fec04ed02363d0208f8", 0xc5, 0x8001, &(0x7f0000000180)={0x1a, 0x322, 0x40, 0x6, 0x7, 0x5, @local}, 0x10) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1040000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01c539003804000000170000000000000000000000000000"]) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000440)) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:22:16 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0xf72) 19:22:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r1, &(0x7f0000000240), &(0x7f00000001c0)=0x6e) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000140)=0xffff, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r3, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) 19:22:16 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x1, 0x2}, 0x14) 19:22:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 406.407171][T16838] Sensor A: Saturation: 128 [ 406.411822][T16838] Sensor A: ================== END STATUS ================== 19:22:16 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000040)={0x0, 0x0, 0x400, 0x20}) fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) [ 406.519393][T16909] binder: 16900:16909 got transaction to invalid handle [ 406.538007][T16909] binder: 16900:16909 transaction failed 29201/-22, size 24-0 line 2903 [ 406.547370][T16909] binder: 16900:16909 ioctl c0306201 20000440 returned -14 [ 406.566279][T16914] device eql entered promiscuous mode [ 406.588614][T16909] binder: 16900:16909 got transaction to invalid handle [ 406.606902][T16909] binder: 16900:16909 transaction failed 29201/-22, size 24-0 line 2903 19:22:16 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x4c4002, 0x0) socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0xfffffffffffffffe, 0x400) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f00000001c0)=0x4) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r0, 0x20) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000040), &(0x7f0000000140)=0x4) 19:22:16 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000040)) [ 406.633748][T16909] binder: 16900:16909 ioctl c0306201 20000440 returned -14 19:22:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 406.803692][T16930] binder: 16926:16930 got transaction to invalid handle [ 406.831991][T16930] binder: 16926:16930 transaction failed 29201/-22, size 24-0 line 2903 [ 406.891824][T16930] binder: 16926:16930 ioctl c0306201 20000440 returned -14 19:22:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0xffffffff00000000, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 19:22:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') fsetxattr(r0, &(0x7f0000000040)=@known='user.syz\x00', &(0x7f0000000100)='\x00\xf8\xfb\x19i\xa2\x1b\xa0\x18_\xde|\xf9XhI$\x8b\xae\xb4\xe7{-\xa3lX\xe8\x13\x00\xb5\xd3\xc8\xb9\xb2\xd4q\xe4-\x97\xe6j\xd0\xf7\xbb\x11\xaf\xdaL\xc1\x89|-\x7fS\xf2q7\xee\xa8JmT\x06LB\xc7\xaf\x81\x85d\xd2\xa9S0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'eql\x00\x00\x00\x00\x00\x04\x00', 0x200000000005002}) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000040)={0x35, 0x38, 0x15, 0x5, 0x4, 0x0, 0x2, 0xca}) [ 407.196092][T16945] binder: 16940:16945 transaction failed 29201/-22, size 24-0 line 2903 19:22:17 executing program 2: r0 = getpgrp(0x0) r1 = syz_open_procfs(r0, &(0x7f00000003c0)='cmdline\x00') fsetxattr(r1, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) [ 407.259997][T16945] binder: 16940:16945 ioctl c0306201 20000440 returned -14 19:22:17 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x4000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x84, r1, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7fffffff}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x400}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x11}, 0x2000c080) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') fsetxattr(r2, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) 19:22:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x810, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0663cd6e0a452f1c06900c4001000000000000000000000000000040ee00000000000000c588eb6aabdf99548ef84532d703b2dd8da0320ab632135847"], 0x5d, 0x0, &(0x7f0000000100)="c670d2af5cf449a9d3c8d3c3a141359105a829211ec26a4ba7a31ae6c209633a0ee817b6add671a7cf41fa894ced0298301610ad37029925e9eecf1eacb459045cea50d76511bc76d038e6bbf1a9e8c49fc1186e49066d035ced8662bd"}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x101000, 0x0) getpeername(r1, &(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001380)=0x80) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x7525fcbe) openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0x140, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000001440)={@ll={0x11, 0xf8, r2, 0x1, 0x0, 0x6, @broadcast}, {&(0x7f00000013c0)=""/34, 0x22}, &(0x7f0000001400), 0x10}, 0xa0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000080)) fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) fanotify_mark(r0, 0x84, 0x8, r0, &(0x7f0000000380)='./file0\x00') 19:22:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup2(r0, r0) setsockopt$inet_int(r1, 0x0, 0x15, &(0x7f0000000380)=0x4, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000280)={0x200, 0x320000, 0x80, 'queue1\x00', 0xfff}) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000340)) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x1d}, 0x4e22, 0x1, 'nq\x00', 0x20, 0x1, 0x1b}, 0x2c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r3, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r2, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) lsetxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000240)=@ng={0x4, 0xd, "3cb3a78fc1af2ecb2d143dd03a76a68f8c"}, 0x13, 0x2) [ 407.501225][T16970] binder: 16967:16970 transaction failed 29201/-22, size 24-0 line 2903 [ 407.523721][T16970] binder: 16967:16970 ioctl c0306201 20000440 returned -14 19:22:17 executing program 2: gettid() r0 = fcntl$getown(0xffffffffffffff9c, 0x9) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000400)='net/netstat\x00') setsockopt$rose(r2, 0x104, 0x2, &(0x7f0000000040)=0x3ff, 0x4) gettid() fsetxattr(r2, &(0x7f00000001c0)=@known='system.sockprotoname\x00', &(0x7f0000000180)='btrfs.', 0x6, 0x0) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x4, 0x240000) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x6, 0x3, 0x40, 0x5, 0x0, 0x8001, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, 0xffffffff80000001, 0x6, 0x7fffffff, 0x20, 0x3f, 0x3, 0x3, 0x3, 0x6, 0x100000, 0xa36, 0x20, 0x0, 0x7a80, 0x101, 0x4, 0x400, 0xffffffffffffffff, 0x6, 0x4, 0x9, 0x2, 0xffffffff, 0xe36, 0x0, 0x4, 0x5, @perf_config_ext={0x22c0, 0x9}, 0xc00, 0xadad, 0x7, 0x5, 0x400, 0xe33, 0x1fe0000000000000}, r0, 0x10, r2, 0xa) connect$nfc_llcp(r2, &(0x7f0000000200)={0x27, 0x1, 0x1, 0x7, 0xebe2, 0x0, "620f122672ad0e029aaa317311d8c32406453e2dc6c48aba7cbb0ddf66b2e58cda69e9606f73cb5d0642f9a6151e42dd0593832ed38a27c6120b972746bf47", 0x1d}, 0x60) [ 407.563348][T16970] binder: 16967:16970 transaction failed 29201/-22, size 24-0 line 2903 [ 407.590067][T16977] IPVS: set_ctl: invalid protocol: 0 172.20.20.29:20002 [ 407.603910][T16970] binder: 16967:16970 ioctl c0306201 20000440 returned -14 [ 407.689618][T16982] device eql entered promiscuous mode [ 407.732353][T16982] IPVS: set_ctl: invalid protocol: 0 172.20.20.29:20002 19:22:18 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f0000000040)) fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) 19:22:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 19:22:18 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0xf82) 19:22:18 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000002300)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000040)=0x1008) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000140)={r3, 0x10000, 0x7c}, 0x8) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r4, 0x1000000) sendfile(r2, r4, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r2) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:22:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005005}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) [ 408.109020][T17000] binder: 16996:17000 ioctl c0306201 20000440 returned -14 19:22:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:18 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000240)={0x6, 0x6, 0x9, 0x0, 0x0, [{r0, 0x0, 0x5}, {r0, 0x0, 0x82d}, {r0, 0x0, 0x3}, {r0, 0x0, 0xb5}, {r0, 0x0, 0xe4c}, {r0, 0x0, 0x7}, {r0, 0x0, 0x7}, {r0, 0x0, 0x7}, {r0, 0x0, 0x3}]}) [ 408.183232][T17000] binder: 16996:17000 ioctl c0306201 20000440 returned -14 [ 408.270709][T17014] device eql entered promiscuous mode 19:22:18 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x40c5, 0x4801) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080), 0x2, 0x100b}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') fsetxattr(r1, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) 19:22:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 408.336574][T17018] binder: 17017:17018 ioctl c0306201 20000440 returned -14 [ 408.361322][T17018] binder: 17017:17018 ioctl c0306201 20000440 returned -14 19:22:18 executing program 2: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) getpgrp(0x0) r0 = getpgrp(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f00000005c0)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1cJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xf7K\xdf\x12\xc0tU\xa8\xa5\xaaw\xcc\x9a2\xa6`\xd7\xa0q\xf853\x1c\xe3\x9cZ\x8b\v\xd6\x00\x00\x00\x01\x00\x00\x00\x00\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\x01E\x83Ag\x11\xec\x10S\xba@\xfah\t\xa9Qq\xa9\v\xf2Q\xec8\xcfCc\xbf}\x13\x7f6\x9f\x0f\xcbZ \x86\x90C\x17\xb98\x11\x1ceN\x92\x10\x98\x03\xdb\x84\x18\xcf\xd1=\xd1\xc9#\xd5\xd8\xf3\xe7\xa3\x8f\x93:\x0eQ\xe3\x88\xd7\x91\xc8\xe9?\xe4\xd3\xaaWM\xbf\xe9\vT}\x9d\xeb\xa4\xd0H \xedK\x01\x7f2/\x82e\xd4\xaf$N\xb9}\xef\"\xd4O\xa6\xcb\xce\xe9\xdd\x85\xf5\vQ-g\xfbk\x1c\xb7g\xeby\x8fb\xb9\xbc4c\xd3\xfe\xe3\xb5\xad,usI\r\x1a\xe9\x82N?\x922{d\xd8\xc9\xdcC~\x13\xe8\xd7\xb9\xbfv\x89K\x1c\x81\x9cn\x93<\x9c\"\x9f\xfc,t') fsetxattr(r1, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) 19:22:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 408.490732][T17026] binder: 17024:17026 ioctl c0306201 20000440 returned -14 19:22:18 executing program 2: fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x7, 0x8100) recvfrom(r0, &(0x7f0000000100)=""/102, 0x66, 0x20, 0x0, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000180)={0x0, 0x1, @stop_pts=0x3f}) 19:22:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 408.602143][T17033] binder: 17029:17033 ioctl c0306201 20000440 returned -14 [ 408.624116][T17033] binder: 17029:17033 ioctl c0306201 20000440 returned -14 [ 408.735208][T17041] binder: 17038:17041 ioctl c0306201 20000440 returned -14 [ 408.764327][T17041] binder: 17038:17041 ioctl c0306201 20000440 returned -14 19:22:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 19:22:18 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x400000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000240)=[@in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e22, 0xfff, @rand_addr="8905fdebf96f26b0fccf90e5e03805dc", 0x6}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e22, 0x8, @rand_addr="87f6029524cbc6e09bbd47e7236d10d2", 0x2}, @in6={0xa, 0x4e22, 0x8b, @mcast2, 0xffff}, @in6={0xa, 0x4e22, 0x401, @empty, 0x7}], 0xb0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') fsetxattr(r1, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) socket$inet(0x2, 0x4, 0x7) ioctl$RTC_UIE_ON(r0, 0x7003) 19:22:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:18 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f0000000140)=0x8001) r4 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r4, 0x1000000) sendfile(r2, r4, &(0x7f00000000c0)=0xf10001, 0xeffffdef) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0xf44, 0x20}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000280)={r5, 0x2d, "c816a1407d77f35bdc7bca7d87336236f6fab700d366461112e29f0e7862d89d47e0fda67e7630a2fa4f912a5a"}, &(0x7f00000002c0)=0x35) close(r2) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000180)={0x0, 'ip6gretap0\x00', 0x4}, 0x18) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:22:18 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0xf97) 19:22:18 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x1005}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r1}}, 0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000002c0)=0x100) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xa8142, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r4, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r3, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) [ 409.065003][T17056] binder: 17047:17056 ioctl c0306201 20000440 returned -14 19:22:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 409.144111][T17066] device eql entered promiscuous mode 19:22:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') ioctl$VT_GETMODE(r0, 0x5601, &(0x7f00000000c0)) fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)='@', 0x1, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/42) [ 409.235053][T17071] binder: 17070:17071 ioctl c0306201 20000440 returned -14 19:22:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000100)={0x1, 0x2, @start={0x5, 0x1}}) getsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 409.410150][T17080] binder: 17078:17080 ioctl c0306201 20000440 returned -14 19:22:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000040)={0x10000, 0x1}) fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) r1 = fcntl$getown(r0, 0x9) sched_getparam(r1, &(0x7f0000000080)) [ 409.582829][T17088] binder_transaction: 15 callbacks suppressed [ 409.582837][T17088] binder: 17086:17088 got transaction to invalid handle [ 409.607272][T17088] binder: 17086:17088 ioctl c0306201 20000440 returned -14 19:22:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 19:22:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:19 executing program 2: r0 = getpgrp(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000140)='map_files\x00') ioctl$TCXONC(r1, 0x540a, 0x0) fsetxattr(r1, &(0x7f00000002c0)=@known='user.syz\x00', &(0x7f0000000300)='\x00', 0x1, 0x0) fgetxattr(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="747275737465640c7b157b2e757365722e73797a0099ef56e801fda5819c0064e1d6f8ea3cd4a150ca5fdd0068370000452d0925fb0ce8cc9f9b68e534604f5d"], &(0x7f0000000200)=""/106, 0x6a) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000080)={0x0, 0x0}) modify_ldt$read(0x0, &(0x7f00000000c0)=""/46, 0x2e) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000001c0)={r2, r3}) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7fff, 0x200) 19:22:19 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0xf9d) 19:22:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r3, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r2, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) recvmmsg(r1, &(0x7f0000003580)=[{{&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/140, 0x8c}, {&(0x7f0000000040)=""/35, 0x23}, {&(0x7f0000000380)=""/181, 0xb5}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f0000000440)=""/77, 0x4d}], 0x5}, 0x1}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000540)=""/212, 0xd4}, {&(0x7f0000000640)=""/209, 0xd1}, {&(0x7f0000000740)=""/94, 0x5e}, {&(0x7f00000007c0)=""/130, 0x82}, {&(0x7f0000000880)=""/169, 0xa9}], 0x5, &(0x7f00000009c0)=""/226, 0xe2}, 0xffffffffffffff00}, {{&(0x7f0000000ac0)=@un=@abs, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000b40)=""/93, 0x5d}, {&(0x7f0000000bc0)=""/152, 0x98}, {&(0x7f0000000140)=""/29, 0x1d}], 0x3, &(0x7f0000000c80)=""/200, 0xc8}, 0x7}, {{&(0x7f0000000d80)=@rc, 0x80, &(0x7f0000000e40)=[{&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f0000000e00)}], 0x2, &(0x7f0000000e80)=""/245, 0xf5}, 0x2b09}, {{&(0x7f0000000f80)=@generic, 0x80, &(0x7f0000003480)=[{&(0x7f0000001000)=""/237, 0xed}, {&(0x7f0000001100)=""/56, 0x38}, {&(0x7f0000001140)=""/29, 0x1d}, {&(0x7f0000001180)=""/160, 0xa0}, {&(0x7f0000001240)=""/113, 0x71}, {&(0x7f00000033c0)=""/149, 0x95}], 0x6, &(0x7f0000003500)=""/80, 0x50}, 0x7f}], 0x5, 0x0, &(0x7f00000036c0)={0x77359400}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000003700)={0x0}, &(0x7f0000003740)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000003780)={r5, 0xfffffffffffffff7}, 0x8) 19:22:19 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x1015, 0x1) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) [ 409.931742][T17106] binder: 17103:17106 got transaction to invalid handle [ 409.964243][T17106] binder: 17103:17106 ioctl c0306201 20000440 returned -14 19:22:19 executing program 2: 19:22:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 410.008392][T17115] device eql entered promiscuous mode 19:22:20 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) [ 410.104138][T17122] binder: 17121:17122 got transaction to invalid handle [ 410.125464][T17122] binder: 17121:17122 ioctl c0306201 20000440 returned -14 19:22:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x80045432, 0x710ffe) 19:22:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x4c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 410.261349][T17132] binder: 17131:17132 got transaction to invalid handle [ 410.268589][T17132] binder: 17131:17132 ioctl c0306201 20000440 returned -14 [ 410.368866][T17136] binder: 17135:17136 got transaction to invalid handle [ 410.376122][T17136] binder: 17135:17136 ioctl c0306201 20000440 returned -14 [ 410.385482][T17136] binder: 17135:17136 got transaction to invalid handle [ 410.393057][T17136] binder: 17135:17136 ioctl c0306201 20000440 returned -14 19:22:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 19:22:20 executing program 2: 19:22:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x6800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:20 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0xfa6) 19:22:20 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x0, 0x5, 0x100000000, 0x9, 0x2, 0x700}) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:22:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2, 0x2, 0x0, 0x4}) preadv(r3, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r2, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) 19:22:20 executing program 2: [ 410.921223][T17147] binder: 17145:17147 got transaction to invalid handle [ 410.938633][T17147] binder_transaction: 18 callbacks suppressed [ 410.938651][T17147] binder: 17145:17147 transaction failed 29201/-22, size 24-0 line 2903 [ 410.999466][T17147] binder: 17145:17147 ioctl c0306201 20000440 returned -14 19:22:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:21 executing program 2: 19:22:21 executing program 2: [ 411.160850][T17166] binder: 17164:17166 got transaction to invalid handle [ 411.176091][T17167] device eql entered promiscuous mode [ 411.178974][T17166] binder: 17164:17166 transaction failed 29201/-22, size 24-0 line 2903 [ 411.201715][T17166] binder: 17164:17166 ioctl c0306201 20000440 returned -14 19:22:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x7400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:21 executing program 2: unshare(0x24020400) r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x1001, 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xfffffef6) unlink(&(0x7f0000000400)='./file0\x00') [ 411.367095][T17177] binder: 17173:17177 got transaction to invalid handle [ 411.374102][T17177] binder: 17173:17177 transaction failed 29201/-22, size 24-0 line 2903 [ 411.419264][T17177] binder: 17173:17177 ioctl c0306201 20000440 returned -14 [ 411.738743][T17160] vivid-003: kernel_thread() failed 19:22:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 19:22:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x7a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:21 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0xfac) 19:22:21 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x8001, 0x0, 0x10001, 0x2}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000140)={0x1, r2}) 19:22:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r3, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r2, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8) [ 411.933221][T17192] binder: 17189:17192 got transaction to invalid handle [ 411.991646][T17192] binder: 17189:17192 transaction failed 29201/-22, size 24-0 line 2903 [ 412.016363][T17192] binder: 17189:17192 ioctl c0306201 20000440 returned -14 [ 412.035573][T17192] binder: 17189:17192 transaction failed 29201/-22, size 24-0 line 2903 [ 412.038684][T17201] device eql entered promiscuous mode [ 412.055690][T17192] binder: 17189:17192 ioctl c0306201 20000440 returned -14 19:22:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 412.176534][T17207] binder: 17205:17207 transaction failed 29201/-22, size 24-0 line 2903 [ 412.194211][T17207] binder: 17205:17207 ioctl c0306201 20000440 returned -14 19:22:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 412.321347][T17212] binder: 17211:17212 transaction failed 29201/-22, size 24-0 line 2903 [ 412.343333][T17212] binder: 17211:17212 ioctl c0306201 20000440 returned -14 19:22:22 executing program 2: syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@known='system.posix_acl_default\x00', 0x0, 0x0, 0x0) [ 412.449943][T17216] binder: 17214:17216 transaction failed 29201/-22, size 24-0 line 2903 [ 412.481070][T17216] binder: 17214:17216 ioctl c0306201 20000440 returned -14 19:22:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:22 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000b40)={'icmp6\x00'}, &(0x7f0000000b80)=0x1e) [ 412.638543][T17228] binder: 17226:17228 transaction failed 29201/-22, size 24-0 line 2903 [ 412.670432][T17228] binder: 17226:17228 ioctl c0306201 20000440 returned -14 19:22:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 19:22:22 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0xfae) 19:22:22 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018008100e00f80ecdb4cb9040a1965000b007c05e87c55a11200e1730000000000000004000000000000812fa8000500484163e3e53db14ca0508ac1799d58f030035c3b61c1d67f6faf7d7134cf6efbe06bbace8017cbec4c2ee5a7cef4c02631631fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6dd457c0b03c10964c360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace80ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703db0de796ac5abeb3a79dd14678", 0xd8}], 0x1}, 0x0) 19:22:22 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) fcntl$setstatus(r0, 0x4, 0x40800) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) [ 412.829171][T17240] binder: 17237:17240 transaction failed 29201/-22, size 24-0 line 2903 [ 412.844596][T17240] binder: 17237:17240 ioctl c0306201 20000440 returned -14 19:22:22 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480)='/dev/nullb0\x00', 0x400000, 0x0) readahead(r0, 0x4, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x200) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000300)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000000400)=0xe8) ioctl$SIOCAX25DELUID(r3, 0x89e2, &(0x7f0000000500)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r4}) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000680)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xdc}, &(0x7f00000001c0)=0x8) ioctl$IOC_PR_PREEMPT(r6, 0x401870cb, &(0x7f0000000640)={0x0, 0x3, 0x4, 0x6}) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000240)={r7, 0x80000001, 0xd09a, 0xbb1}, &(0x7f0000000280)=0x10) preadv(r5, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r2, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) ioctl$SG_GET_REQUEST_TABLE(r6, 0x2286, &(0x7f00000006c0)) 19:22:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 412.947205][T17245] IPv6: NLM_F_CREATE should be specified when creating new route 19:22:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") semctl$SEM_STAT(0x0, 0x0, 0x12, 0x0) [ 413.015603][T17255] binder: 17253:17255 ioctl c0306201 20000440 returned -14 19:22:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:23 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="c4"], 0x1) [ 413.151892][T17265] binder: 17263:17265 ioctl c0306201 20000440 returned -14 [ 413.172603][T17265] binder: 17263:17265 ioctl c0306201 20000440 returned -14 [ 413.190505][T17266] device eql entered promiscuous mode 19:22:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x80045432, 0xfffffffffffffffd) [ 413.331331][T17274] binder: 17273:17274 ioctl c0306201 20000440 returned -14 19:22:23 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f00009b1ffc)) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0xc0205647, &(0x7f0000000180)) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 19:22:23 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) close(r0) chroot(&(0x7f0000000040)='./file0\x00') 19:22:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:23 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0xfbc) 19:22:23 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:22:23 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0xfffffffffffffffb, 0x200000) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f00000002c0)={0x1, "369c8cb4c62e4f74683ca1ac7ab6d795fdbbb8b71db839f4c4d9dd6e3c740f20", 0x1, 0x1}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x6, 0x111002) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x9) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) read$FUSE(r2, &(0x7f00000013c0), 0x1000) preadv(r5, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) connect$rxrpc(r3, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x8b, @dev={0xfe, 0x80, [], 0x27}, 0xfffffffffffffbff}}, 0x24) accept4$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14, 0x80000) ioctl$sock_ifreq(r4, 0x48914, &(0x7f00000000c0)={'%\x00\x00hE\x80\xf1\x13E\xbeP\x00', @ifru_names='yam0\x00'}) ioctl$KVM_GET_CPUID2(r4, 0xc008ae91, &(0x7f0000000340)=ANY=[@ANYBLOB="04000000000000000000000000000000f31fdabeb6bde9e5ae130f632f8652080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) ioctl$VT_RELDISP(r2, 0x5605) 19:22:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) [ 413.853490][T17296] binder: 17293:17296 ioctl c0306201 20000440 returned -14 19:22:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x100000000000000, 0x0}) 19:22:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x48000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 413.904169][T17296] binder: 17293:17296 ioctl c0306201 20000440 returned -14 [ 414.041262][ T7856] binder: undelivered TRANSACTION_ERROR: 29189 [ 414.071929][T17313] binder: 17311:17313 ioctl c0306201 20000440 returned -14 19:22:24 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 414.088113][T17313] binder: 17311:17313 ioctl c0306201 20000440 returned -14 19:22:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x4c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:24 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 19:22:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x68000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 414.228585][T17323] binder: 17322:17323 ioctl c0306201 20000440 returned -14 19:22:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x6c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 414.345429][T17332] binder: 17328:17332 ioctl c0306201 20000440 returned -14 19:22:24 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0xfbe) 19:22:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x74000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 414.422118][T17335] binder: 17334:17335 ioctl c0306201 20000440 returned -14 [ 414.528172][T17341] binder: 17340:17341 ioctl c0306201 20000440 returned -14 19:22:24 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r0, 0x20001000001) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:22:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) 19:22:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x7a000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:24 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0xfc0) 19:22:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 19:22:24 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000500)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x202, 0x800000002009) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\xac\xeaC', 0x4) ftruncate(r3, 0x1000000) write$binfmt_misc(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="73797a3115c7ed4b506b11d2b447076240af3e8ed31bbd6c6bca4cf8f998b27177907b9dbed1b27c2584b6eced0e7826e5823d66366da1933d67aeccc2f0751e91cb9f954c0d35b7fb6f3f1f9c"], 0x4d) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000440)={@loopback, r4}, 0x14) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000180)={@remote, r5}, 0x14) sendfile(r2, r3, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) [ 414.858064][T17359] binder_transaction: 18 callbacks suppressed [ 414.858074][T17359] binder: 17354:17359 got transaction to invalid handle [ 414.885499][T17359] binder: 17354:17359 ioctl c0306201 20000440 returned -14 19:22:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 414.917166][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 414.923258][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 414.955757][T17364] device eql entered promiscuous mode [ 415.003698][T17369] binder: 17368:17369 ioctl c0306201 20000440 returned -14 [ 415.157170][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 415.163010][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:22:27 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 19:22:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:27 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0xfc2) 19:22:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 19:22:27 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0xfffffffffffffffa, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xffffffff}, {0xa, 0x4e21, 0x3, @mcast2, 0xd8}, 0x2, [0x7ff, 0x1000, 0xfffffffffffffc76, 0x400, 0x2400000000000000, 0x400, 0x80]}, 0x5c) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x10000, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000140)={0x2, 'bpq0\x00', 0x1}, 0x18) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r2) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:22:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='ns\x00') perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x6, 0x9, 0x8, 0x1, 0x0, 0x4, 0x2094, 0xc, 0x4, 0x2, 0x1, 0x8, 0x5, 0x7, 0x80000000, 0x1, 0x1, 0x3ff, 0x7fff, 0x6, 0x5, 0x200, 0x80, 0x3, 0xab2, 0x9c00, 0x3, 0x800, 0x6, 0x8, 0x1ff, 0x1000, 0x3, 0xd1a7, 0x5, 0x9, 0x0, 0x8, 0x4, @perf_config_ext={0x1f, 0x7}, 0x10000, 0x9, 0xff, 0x3, 0xfff, 0x0, 0x2}, 0x0, 0x6, r1, 0x2) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") r2 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x8000, 0x80000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000400)={0x0, 0x7, "f3cdc90c8ef64e"}, &(0x7f0000000440)=0xf) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000480)={r3, @in={{0x2, 0x4e22, @loopback}}}, &(0x7f0000000540)=0x84) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000640)) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000300)={'nat\x00', 0x0, 0x4, 0xbc, [], 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000240)=""/188}, &(0x7f0000000140)=0x78) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r5, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r6, 0x4038564f, &(0x7f0000000380)={{0x4, @addr=0x9}, 0x8, 0x31, 0x4}) ioctl$sock_ifreq(r4, 0x8915, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) [ 417.375854][T17389] binder_transaction: 15 callbacks suppressed [ 417.375870][T17389] binder: 17382:17389 transaction failed 29189/-22, size 24-0 line 2903 19:22:27 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 417.424050][T17389] binder: 17382:17389 ioctl c0306201 20000440 returned -14 [ 417.448550][T17389] binder: 17382:17389 transaction failed 29189/-22, size 24-0 line 2903 [ 417.472085][T17389] binder: 17382:17389 ioctl c0306201 20000440 returned -14 19:22:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 417.586117][T17404] binder: 17403:17404 transaction failed 29189/-22, size 24-0 line 2903 [ 417.594811][T17404] binder: 17403:17404 ioctl c0306201 20000440 returned -14 19:22:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 417.664955][T17408] binder: 17407:17408 transaction failed 29189/-22, size 24-0 line 2903 [ 417.673582][T17408] binder: 17407:17408 ioctl c0306201 20000440 returned -14 19:22:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 417.742996][T17412] binder: 17411:17412 transaction failed 29189/-22, size 24-0 line 2903 [ 417.751813][T17412] binder: 17411:17412 ioctl c0306201 20000440 returned -14 19:22:27 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0xfc4) 19:22:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 417.862660][T17417] binder: 17414:17417 transaction failed 29189/-22, size 24-0 line 2903 [ 417.876546][T17417] binder: 17414:17417 ioctl c0306201 20000440 returned -14 [ 417.996554][T17421] binder: 17420:17421 transaction failed 29189/-22, size 24-0 line 2903 [ 418.015806][T17421] binder: 17420:17421 ioctl c0306201 20000440 returned -14 [ 418.026396][T17421] binder: 17420:17421 transaction failed 29189/-22, size 24-0 line 2903 [ 418.044501][T17421] binder: 17420:17421 ioctl c0306201 20000440 returned -14 19:22:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0xa00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 418.133634][T17426] binder: 17425:17426 transaction failed 29189/-22, size 24-0 line 2903 [ 418.151382][T17426] binder: 17425:17426 ioctl c0306201 20000440 returned -14 19:22:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x1200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 19:22:28 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:22:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000240)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r2, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f00000003c0)={'nat\x00', 0x0, 0x3, 0x53, [], 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000340)=""/83}, &(0x7f0000000140)=0x78) [ 418.264750][T17433] binder: 17429:17433 transaction failed 29189/-22, size 24-0 line 2903 [ 418.339080][T17433] binder: 17429:17433 ioctl c0306201 20000440 returned -14 [ 418.364514][T17433] binder: 17429:17433 ioctl c0306201 20000440 returned -14 [ 418.406516][T17445] device eql entered promiscuous mode 19:22:30 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$cont(0x1f, r0, 0x0, 0x0) 19:22:30 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0xfc8) 19:22:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x4800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000240)={0x0, @data}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) 19:22:30 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f0000000140)=0x1e) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:22:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) [ 420.574957][T17462] binder: 17453:17462 ioctl c0306201 20000440 returned -14 19:22:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 420.652775][T17469] device eql entered promiscuous mode 19:22:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x6800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 420.706164][T17472] binder: 17471:17472 ioctl c0306201 20000440 returned -14 [ 420.805774][T17476] binder: 17475:17476 ioctl c0306201 20000440 returned -14 19:22:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x6c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 420.926747][T17480] binder: 17479:17480 ioctl c0306201 20000440 returned -14 [ 420.946475][T17480] binder: 17479:17480 ioctl c0306201 20000440 returned -14 19:22:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x7400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x7a00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 421.087826][T17483] binder: 17482:17483 ioctl c0306201 20000440 returned -14 19:22:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'\x00\x00\xea\xb5w\x18[\xf8\vI\x8e\x98\xfd{\xd8\x00', 0x10}) r4 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x10000, 0x200) ioctl$SIOCX25CALLACCPTAPPRV(r4, 0x89e8) preadv(r3, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r2, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) [ 421.167804][T17486] binder: 17485:17486 ioctl c0306201 20000440 returned -14 19:22:33 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$cont(0x1f, r0, 0x0, 0x0) 19:22:33 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0xfd3) 19:22:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000140)=@fragment={0x0, 0x0, 0x0, 0x101, 0x0, 0x100, 0x68}, 0x8) 19:22:33 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) socket$bt_bnep(0x1f, 0x3, 0x4) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:22:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 19:22:33 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 423.608627][T17510] binder_transaction: 8 callbacks suppressed [ 423.608643][T17510] binder: 17502:17510 transaction failed 29189/-22, size 24-0 line 2903 [ 423.645116][T17510] binder: 17502:17510 ioctl c0306201 20000440 returned -14 [ 423.685556][T17510] binder: 17502:17510 transaction failed 29189/-22, size 24-0 line 2903 [ 423.694941][T17519] device eql entered promiscuous mode [ 423.737728][T17510] binder: 17502:17510 ioctl c0306201 20000440 returned -14 19:22:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 423.854916][T17527] binder: 17526:17527 transaction failed 29189/-22, size 24-0 line 2903 [ 423.872456][T17527] binder: 17526:17527 ioctl c0306201 20000440 returned -14 19:22:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:34 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0xf000) [ 424.020365][T17531] binder: 17530:17531 transaction failed 29189/-22, size 24-0 line 2903 [ 424.050578][T17531] binder: 17530:17531 ioctl c0306201 20000440 returned -14 19:22:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 424.175608][T17537] binder: 17536:17537 transaction failed 29189/-22, size 24-0 line 2903 [ 424.197550][T17537] binder: 17536:17537 ioctl c0306201 20000440 returned -14 19:22:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 424.273109][T17540] binder: 17539:17540 transaction failed 29189/-22, size 24-0 line 2903 [ 424.292230][T17540] binder: 17539:17540 ioctl c0306201 20000440 returned -14 19:22:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = accept(r0, &(0x7f0000000240)=@isdn, &(0x7f0000000040)=0x80) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2200020}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r2, 0x100, 0x70bd25, 0x25dfdbff, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x3, 0x3, 0x6, 0x8}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20008881}, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") r3 = syz_genetlink_get_family_id$team(&(0x7f00000003c0)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000002800)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000002900)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000003ec0)={{{@in=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@empty}}, &(0x7f0000003fc0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000004040)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@initdev}}, &(0x7f0000004140)=0xe8) getpeername$packet(r1, &(0x7f00000054c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000005500)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000005600)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000005700)={'bridge_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000005740)={'bond_slave_1\x00', 0x0}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000005780)={0x0, @broadcast, @local}, &(0x7f00000057c0)=0xc) getsockname(r1, &(0x7f0000005800)=@hci={0x1f, 0x0}, &(0x7f0000005880)=0x80) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000005940)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@empty}}, &(0x7f0000005a40)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000005a80)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000005b80)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000005bc0)={'vcan0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005c00)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@local}}, &(0x7f0000005d00)=0xe8) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000005d40)={@rand_addr, 0x0}, &(0x7f0000005d80)=0x14) recvmmsg(r1, &(0x7f0000007400)=[{{&(0x7f0000005dc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000006040)=[{&(0x7f0000005e40)=""/232, 0xe8}, {&(0x7f0000005f40)=""/14, 0xe}, {&(0x7f0000005f80)=""/74, 0x4a}, {&(0x7f0000006000)=""/5, 0x5}], 0x4, &(0x7f0000006080)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000007080)=@tipc=@name, 0x80, &(0x7f0000007200)=[{&(0x7f0000007100)=""/48, 0x30}, {&(0x7f0000007140)=""/154, 0x9a}], 0x2, &(0x7f0000007240)=""/3, 0x3}, 0x1}, {{&(0x7f0000007280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000007340)=[{&(0x7f0000007300)=""/35, 0x23}], 0x1, &(0x7f0000007380)=""/128, 0x80}, 0xfffffffffffff93b}], 0x3, 0x40, &(0x7f00000074c0)={0x77359400}) recvmmsg(r1, &(0x7f000000a040)=[{{&(0x7f0000007500)=@isdn, 0x80, &(0x7f00000075c0)=[{&(0x7f0000007580)=""/60, 0x3c}], 0x1, &(0x7f0000007600)=""/225, 0xe1}, 0x5dcdb95}, {{&(0x7f0000007700)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000007cc0)=[{&(0x7f0000007780)=""/81, 0x51}, {&(0x7f0000007800)=""/253, 0xfd}, {&(0x7f0000007900)=""/183, 0xb7}, {&(0x7f00000079c0)=""/110, 0x6e}, {&(0x7f0000007a40)=""/33, 0x21}, {&(0x7f0000007a80)=""/182, 0xb6}, {&(0x7f0000007b40)=""/68, 0x44}, {&(0x7f0000007bc0)=""/36, 0x24}, {&(0x7f0000007c00)=""/171, 0xab}], 0x9, &(0x7f0000007d80)=""/23, 0x17}, 0xb15}, {{&(0x7f0000007dc0)=@isdn, 0x80, &(0x7f0000008200)=[{&(0x7f0000007e40)=""/5, 0x5}, {&(0x7f0000007e80)=""/121, 0x79}, {&(0x7f0000007f00)=""/119, 0x77}, {&(0x7f0000007f80)=""/105, 0x69}, {&(0x7f0000008000)}, {&(0x7f0000008040)=""/222, 0xde}, {&(0x7f0000008140)=""/174, 0xae}], 0x7, &(0x7f0000008280)=""/255, 0xff}, 0x6}, {{&(0x7f0000008380)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000009900)=[{&(0x7f0000008400)=""/105, 0x69}, {&(0x7f0000008480)=""/238, 0xee}, {&(0x7f0000008580)=""/46, 0x2e}, {&(0x7f00000085c0)=""/211, 0xd3}, {&(0x7f00000086c0)=""/252, 0xfc}, {&(0x7f00000087c0)=""/164, 0xa4}, {&(0x7f0000008880)=""/124, 0x7c}, {&(0x7f0000008900)=""/4096, 0x1000}], 0x8, &(0x7f0000009980)=""/195, 0xc3}, 0x5}, {{&(0x7f0000009a80)=@un=@abs, 0x80, &(0x7f0000009bc0)=[{&(0x7f0000009b00)=""/33, 0x21}, {&(0x7f0000009b40)=""/111, 0x6f}], 0x2, &(0x7f0000009c00)=""/35, 0x23}, 0x3}, {{&(0x7f0000009c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000009f00)=[{&(0x7f0000009cc0)=""/24, 0x18}, {&(0x7f0000009d00)=""/12, 0xc}, {&(0x7f0000009d40)=""/138, 0x8a}, {&(0x7f0000009e00)=""/12, 0xc}, {&(0x7f0000009e40)=""/182, 0xb6}], 0x5, &(0x7f0000009f80)=""/148, 0x94}, 0x20}], 0x6, 0x40000002, &(0x7f000000a1c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f000000a200)={{{@in6=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@empty}}, &(0x7f000000a300)=0xe8) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f000000a400)={@mcast1, 0x0}, &(0x7f000000a440)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f000000a680)={{{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f000000a780)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f000000a7c0)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f000000a880)={0x0, @initdev, @dev}, &(0x7f000000a8c0)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f000000a940)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in6=@dev}}, &(0x7f000000aa40)=0xe8) accept$packet(r1, &(0x7f000000cf40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f000000cf80)=0x14) recvmsg$kcm(r1, &(0x7f000000d580)={&(0x7f000000d000)=@hci={0x1f, 0x0}, 0x80, &(0x7f000000d400)=[{&(0x7f000000d080)=""/166, 0xa6}, {&(0x7f000000d140)=""/238, 0xee}, {&(0x7f000000d240)=""/69, 0x45}, {&(0x7f000000d2c0)=""/57, 0x39}, {&(0x7f000000d300)=""/25, 0x19}, {&(0x7f000000d340)=""/180, 0xb4}], 0x6, &(0x7f000000d480)=""/243, 0xf3}, 0x2) getsockname(r1, &(0x7f000000d680)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f000000d700)=0x80) getsockopt$inet6_mreq(r1, 0x29, 0x1d, &(0x7f000000d740)={@local, 0x0}, &(0x7f000000d780)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f000000d800)={{{@in6, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f000000d900)=0xe8) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f000000d940)={@rand_addr, @remote, 0x0}, &(0x7f000000d980)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000d9c0)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f000000dac0)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6}}, &(0x7f000000dbc0)=0xe8) recvmmsg(r0, &(0x7f0000012d00)=[{{&(0x7f000000dc40)=@xdp, 0x80, &(0x7f000000e0c0)=[{&(0x7f000000dcc0)=""/32, 0x20}, {&(0x7f000000dd00)=""/167, 0xa7}, {&(0x7f000000ddc0)=""/6, 0x6}, {&(0x7f000000de00)=""/147, 0x93}, {&(0x7f000000dec0)=""/211, 0xd3}, {&(0x7f000000dfc0)}, {&(0x7f000000e000)=""/62, 0x3e}, {&(0x7f000000e040)=""/79, 0x4f}], 0x8, &(0x7f000000e140)=""/122, 0x7a}, 0x9a}, {{&(0x7f000000e1c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000010380)=[{&(0x7f000000e240)=""/4096, 0x1000}, {&(0x7f000000f240)=""/11, 0xb}, {&(0x7f000000f280)=""/80, 0x50}, {&(0x7f000000f300)=""/83, 0x53}, {&(0x7f000000f380)=""/4096, 0x1000}], 0x5, &(0x7f0000010400)=""/222, 0xde}, 0x3}, {{0x0, 0x0, 0xfffffffffffffffd, 0x0, &(0x7f0000010500)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000011500)=@l2, 0x80, &(0x7f0000011840)=[{&(0x7f0000011580)=""/27, 0x1b}, {&(0x7f00000115c0)=""/30, 0x1e}, {&(0x7f0000011600)=""/26, 0x1a}, {&(0x7f0000011640)=""/25, 0x19}, {&(0x7f0000011680)=""/187, 0xbb}, {&(0x7f0000011740)=""/30, 0x1e}, {&(0x7f0000011780)=""/106, 0x6a}, {&(0x7f0000011800)=""/49, 0x31}], 0x8, &(0x7f00000118c0)=""/147, 0x93}, 0x3}, {{&(0x7f0000011980)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000012c40)=[{&(0x7f0000011a00)=""/4096, 0x1000}, {&(0x7f0000012a00)=""/7, 0x7}, {&(0x7f0000012a40)=""/214, 0xd6}, {&(0x7f0000012b40)=""/31, 0x1f}, {&(0x7f0000012b80)=""/148, 0x94}], 0x5, &(0x7f0000012cc0)=""/41, 0x29}, 0x3}], 0x5, 0x1, 0x0) recvmmsg(r1, &(0x7f0000016f80)=[{{&(0x7f0000012e40)=@alg, 0x80, &(0x7f0000012fc0)=[{&(0x7f0000012ec0)=""/255, 0xff}], 0x1, &(0x7f0000013000)=""/70, 0x46}, 0xffffffffffff8000}, {{0x0, 0x0, &(0x7f00000133c0)=[{&(0x7f0000013080)=""/209, 0xd1}, {&(0x7f0000013180)=""/54, 0x36}, {&(0x7f00000131c0)=""/84, 0x54}, {&(0x7f0000013240)=""/93, 0x5d}, {&(0x7f00000132c0)=""/197, 0xc5}], 0x5, &(0x7f0000013440)=""/222, 0xde}, 0x6}, {{&(0x7f0000013540)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f00000145c0)=[{&(0x7f00000135c0)=""/4096, 0x1000}], 0x1, &(0x7f0000014600)=""/247, 0xf7}, 0xfff}, {{&(0x7f0000014700)=@generic, 0x80, &(0x7f0000014ac0)=[{&(0x7f0000014780)=""/212, 0xd4}, {&(0x7f0000014880)=""/88, 0x58}, {&(0x7f0000014900)=""/107, 0x6b}, {&(0x7f0000014980)=""/23, 0x17}, {&(0x7f00000149c0)=""/196, 0xc4}], 0x5, &(0x7f0000014b40)=""/4096, 0x1000}, 0x1}, {{0x0, 0x0, &(0x7f0000016e40)=[{&(0x7f0000015b40)=""/17, 0x11}, {&(0x7f0000015b80)=""/237, 0xed}, {&(0x7f0000015c80)=""/87, 0x57}, {&(0x7f0000015d00)=""/254, 0xfe}, {&(0x7f0000015e00)=""/38, 0x26}, {&(0x7f0000015e40)=""/4096, 0x1000}], 0x6, &(0x7f0000016ec0)=""/129, 0x81}, 0x7}], 0x5, 0x40000000, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000017b40)={&(0x7f0000000000), 0xc, &(0x7f0000017b00)={&(0x7f00000170c0)={0xa0c, r3, 0x400, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x198, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x2eb2}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r5}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x8001, 0xb6, 0x1, 0x4}, {0x398, 0x3f, 0x9, 0x9}, {0x5, 0x3e, 0x10000, 0x7fff}, {0x1, 0x5, 0x1f, 0xb1}, {0x59a35362, 0x6, 0x1, 0x400}, {0x3, 0x401, 0x6, 0x2}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r7}, {0x1e8, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x21f}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x12c, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r15}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r16}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x100000001}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r17}}}]}}, {{0x8, 0x1, r18}, {0xb4, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xd77}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r19}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x8, 0x21, 0x800, 0x7}]}}}]}}, {{0x8, 0x1, r20}, {0xfc, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x100000000}}, {0x8, 0x6, r21}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r22}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r23}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r24}}}]}}, {{0x8, 0x1, r25}, {0xb8, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r26}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r27}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xabbd}}, {0x8, 0x6, r28}}}]}}, {{0x8, 0x1, r29}, {0x12c, 0x2, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x3, 0x4, 0x680, 0x98}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x44, 0x4, [{0x0, 0x1, 0x2, 0x3}, {0x3, 0x9, 0x2, 0x2af}, {0xfffffffffffff3e1, 0x3, 0xcae0, 0x2}, {0x9, 0x1, 0x4, 0x5}, {0x1ff, 0x1, 0x5, 0x6}, {0xdf8b, 0x42, 0x7fffffff, 0x8}, {0xffffffffffffffe1, 0x2, 0xfffffffffffffffb, 0xff}, {0x3, 0xc9, 0x100000001, 0x2}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r30}, {0x80, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r31}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r32}}}]}}, {{0x8, 0x1, r33}, {0xf0, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r34}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x200}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r35}}}]}}]}, 0xa0c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000051) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r37 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x800, 0x0) ioctl$TUNSETIFF(r37, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r37, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r36, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) [ 424.384769][T17546] binder: 17543:17546 transaction failed 29189/-22, size 24-0 line 2903 19:22:34 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x9c7, 0x218000) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0xfffffffffffffef8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000540)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x3, 0x0, 0x31b) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000040)) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r2) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(r1, 0x0, 0xffffffffffffff00) 19:22:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) [ 424.430872][T17546] binder: 17543:17546 ioctl c0306201 20000440 returned -14 [ 424.483079][T17552] device eql entered promiscuous mode 19:22:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 424.562646][T17560] binder: 17559:17560 transaction failed 29189/-22, size 24-0 line 2903 [ 424.575119][T17560] binder: 17559:17560 ioctl c0306201 20000440 returned -14 [ 424.585837][T17560] binder: 17559:17560 transaction failed 29189/-22, size 24-0 line 2903 [ 424.594814][T17560] binder: 17559:17560 ioctl c0306201 20000440 returned -14 [ 424.652461][T17566] binder: 17565:17566 transaction failed 29189/-22, size 24-0 line 2903 [ 424.664615][T17566] binder: 17565:17566 ioctl c0306201 20000440 returned -14 19:22:36 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 19:22:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:36 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x7ffff000) 19:22:36 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:22:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 19:22:36 executing program 5: r0 = shmget(0x2, 0x3000, 0x100, &(0x7f0000ffd000/0x3000)=nil) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000001c0)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000004c0)=0x0) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000500)={0x0, 0x0}) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$ION_IOC_HEAP_QUERY(r7, 0xc0184908, &(0x7f0000000680)={0x34, 0x0, &(0x7f0000000640)}) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000540)={{0x100000000, r1, r2, r3, r4, 0x8, 0x1}, 0x4, 0x3f, 0x4, 0x10001, r5, r6, 0x400}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r8, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/dlm-control\x00', 0x301000, 0x0) preadv(r10, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) r11 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x800, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r11, 0xae78, &(0x7f0000000140)) ioctl$sock_ifreq(r9, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) [ 426.821126][T17577] binder: 17576:17577 ioctl c0306201 20000440 returned -14 [ 426.863530][T17577] binder: 17576:17577 ioctl c0306201 20000440 returned -14 19:22:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 426.908912][T17593] device eql entered promiscuous mode 19:22:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 426.949161][T17596] binder: 17595:17596 ioctl c0306201 20000440 returned -14 19:22:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 427.019530][T17599] binder: 17598:17599 ioctl c0306201 20000440 returned -14 [ 427.144784][T17602] binder: 17601:17602 ioctl c0306201 20000440 returned -14 19:22:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 427.283212][T17606] binder: 17605:17606 ioctl c0306201 20000440 returned -14 19:22:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 427.361013][T17610] binder: 17608:17610 ioctl c0306201 20000440 returned -14 [ 427.464938][T17614] binder: 17613:17614 ioctl c0306201 20000440 returned -14 19:22:39 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 19:22:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") r1 = syz_open_dev$swradio(&(0x7f0000000240)='/dev/swradio#\x00', 0x1, 0x2) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000440)={&(0x7f0000000280), 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r2, @ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0x80}, 0x10) socketpair$unix(0x1, 0xfffffffffffffffe, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) mlockall(0x7) preadv(r4, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r3, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000140)={0x2, &(0x7f0000000040)=[{0xd40, 0x2, 0x0, 0xd65c}, {0xdca9, 0xa8, 0x1, 0x1}]}) eventfd(0x7) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f00000001c0)=0x20, 0x4) 19:22:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:39 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0xfffff000) 19:22:39 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[0x3, 0x6, 0x8]}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x402000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x144, r2, 0x10, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa1c3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x88, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x681}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_BEARER={0x70, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x46}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4c810}, 0x50) close(r0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:22:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 19:22:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 429.910717][T17632] binder_transaction: 8 callbacks suppressed [ 429.910737][T17632] binder: 17621:17632 transaction failed 29189/-22, size 24-0 line 2903 [ 429.934942][T17632] binder: 17621:17632 ioctl c0306201 20000440 returned -14 19:22:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 430.024712][T17640] binder: 17639:17640 transaction failed 29189/-22, size 24-0 line 2903 [ 430.036297][T17640] binder: 17639:17640 ioctl c0306201 20000440 returned -14 19:22:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 430.098165][T17644] binder: 17643:17644 transaction failed 29189/-22, size 24-0 line 2903 [ 430.106720][T17644] binder: 17643:17644 ioctl c0306201 20000440 returned -14 19:22:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 430.173783][T17648] binder: 17647:17648 transaction failed 29189/-22, size 24-0 line 2903 [ 430.182288][T17648] binder: 17647:17648 ioctl c0306201 20000440 returned -14 19:22:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 430.264277][T17652] binder: 17651:17652 transaction failed 29189/-22, size 24-0 line 2903 [ 430.272866][T17652] binder: 17651:17652 ioctl c0306201 20000440 returned -14 19:22:40 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0xffffff1f) [ 430.343499][T17655] binder: 17654:17655 transaction failed 29189/-22, size 24-0 line 2903 [ 430.357950][T17655] binder: 17654:17655 ioctl c0306201 20000440 returned -14 19:22:42 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 19:22:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x4c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:42 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0xffff888097707001) 19:22:42 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000040)) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:22:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 19:22:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = msgget$private(0x0, 0x400) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000240)=""/240) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x84000, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)={&(0x7f0000000040)='./file0\x00', r2}, 0x10) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r4, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r3, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) [ 432.966865][T17678] binder: 17668:17678 transaction failed 29189/-22, size 24-0 line 2903 [ 432.997595][T17678] binder: 17668:17678 ioctl c0306201 20000440 returned -14 [ 433.022552][T17678] binder: 17668:17678 transaction failed 29189/-22, size 24-0 line 2903 [ 433.031696][T17685] device eql entered promiscuous mode [ 433.038417][T17678] binder: 17668:17678 ioctl c0306201 20000440 returned -14 19:22:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x6800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 433.154342][T17688] binder: 17687:17688 transaction failed 29189/-22, size 24-0 line 2903 [ 433.162963][T17688] binder: 17687:17688 ioctl c0306201 20000440 returned -14 19:22:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x7400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 433.256649][T17692] binder: 17691:17692 transaction failed 29189/-22, size 24-0 line 2903 [ 433.265345][T17692] binder: 17691:17692 ioctl c0306201 20000440 returned -14 [ 433.400810][T17696] binder: 17695:17696 ioctl c0306201 20000440 returned -14 19:22:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x7a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000088912, &(0x7f0000000240)="0adc1f023c123f3188a070") r1 = accept4$inet(r0, 0x0, &(0x7f0000000040), 0x80800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) r4 = syz_open_dev$media(&(0x7f0000000a40)='/dev/media#\x00', 0x7, 0x200000) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000a80)=@int=0x4, 0x4) r5 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x7, 0x800) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f0000000280)={'U-', 0x4}, 0x28, 0x3) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r5, 0xc0105303, &(0x7f00000001c0)={0x5, 0x67, 0x4}) preadv(r3, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r2, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) [ 433.520123][T17699] binder: 17698:17699 ioctl c0306201 20000440 returned -14 [ 433.629984][T17706] binder: 17704:17706 ioctl c0306201 20000440 returned -14 [ 433.672871][T17708] device eql entered promiscuous mode 19:22:45 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 19:22:45 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0xfffffffffffff000) 19:22:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:45 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x1) 19:22:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 19:22:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x14241, 0x0) connect$netrom(r3, &(0x7f00000002c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$CAPI_REGISTER(r3, 0x400c4301, &(0x7f0000000240)={0xf84, 0x5, 0x4}) fstatfs(r1, &(0x7f0000000340)=""/124) getsockopt$inet_tcp_buf(r3, 0x6, 0x0, &(0x7f0000000140)=""/42, &(0x7f00000001c0)=0x2a) bind$rose(r3, &(0x7f0000000280)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5, [@default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x40) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) [ 436.054519][T17727] binder_transaction: 3 callbacks suppressed [ 436.054536][T17727] binder: 17722:17727 transaction failed 29189/-22, size 24-0 line 2903 [ 436.092747][T17727] binder: 17722:17727 ioctl c0306201 20000440 returned -14 19:22:46 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 19:22:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 436.173326][T17723] device eql entered promiscuous mode 19:22:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 436.230995][T17739] binder: 17738:17739 transaction failed 29189/-22, size 24-0 line 2903 [ 436.240157][T17739] binder: 17738:17739 ioctl c0306201 20000440 returned -14 19:22:46 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 19:22:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 436.369383][T17747] binder: 17744:17747 transaction failed 29189/-22, size 24-0 line 2903 [ 436.378349][T17747] binder: 17744:17747 ioctl c0306201 20000440 returned -14 [ 436.464286][T17752] binder: 17751:17752 transaction failed 29189/-22, size 24-0 line 2903 [ 436.481808][T17752] binder: 17751:17752 ioctl c0306201 20000440 returned -14 [ 436.498039][T17752] binder: 17751:17752 transaction failed 29189/-22, size 24-0 line 2903 19:22:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 436.515775][T17752] binder: 17751:17752 ioctl c0306201 20000440 returned -14 [ 436.625865][T17756] binder: 17755:17756 transaction failed 29189/-22, size 24-0 line 2903 [ 436.665975][T17756] binder: 17755:17756 ioctl c0306201 20000440 returned -14 19:22:46 executing program 4: mlockall(0x8000000000000001) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x4000, 0x0) ioctl$CAPI_SET_FLAGS(r0, 0x80044324, &(0x7f0000000080)=0x7ff) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r2, 0x0, 0x1) gettid() 19:22:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) r3 = semget(0x0, 0x3, 0x2) semctl$GETALL(r3, 0x0, 0xd, &(0x7f0000000240)=""/110) [ 436.816187][T17763] binder: 17760:17763 transaction failed 29189/-22, size 24-0 line 2903 [ 436.836524][T17763] binder: 17760:17763 ioctl c0306201 20000440 returned -14 19:22:46 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01080000ffffffffffff9075a7e8000000000000000012eae5e84f075594"]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r4, 0x1000000) sendfile(r3, r4, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r3) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000140)={0x40, 0x863}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:22:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 19:22:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 436.986962][T17775] binder: 17772:17775 transaction failed 29189/-22, size 24-0 line 2903 [ 437.014834][T17775] binder: 17772:17775 ioctl c0306201 20000440 returned -14 [ 437.016791][T17780] device eql entered promiscuous mode 19:22:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x48000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 437.113500][T17787] binder: 17786:17787 transaction failed 29189/-22, size 24-0 line 2903 [ 437.133060][T17787] binder: 17786:17787 ioctl c0306201 20000440 returned -14 [ 437.211134][T17791] binder: 17790:17791 transaction failed 29189/-22, size 24-0 line 2903 [ 437.226692][T17791] binder: 17790:17791 ioctl c0306201 20000440 returned -14 19:22:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x4c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 437.352269][T17795] binder: 17794:17795 ioctl c0306201 20000440 returned -14 19:22:49 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 19:22:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x68000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:49 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') getsockopt$packet_buf(r0, 0x107, 0x0, &(0x7f00000001c0)=""/4096, &(0x7f0000000040)=0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x1) 19:22:49 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r1, 0x300, 0x70bd2b, 0x25dfdbff, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x80000, 0xffffffffffffff9c}) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20\x00', 0x440000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000280)={r5, 0x80000, r6}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r7, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) setxattr$security_smack_transmute(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000340)='TRUE', 0x4, 0x3) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x482, 0x0) ioctl$PPPIOCGNPMODE(r8, 0xc008744c, &(0x7f0000000140)={0xc22b, 0x3}) ioctl$sock_ifreq(r4, 0x4000000000008914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_ivalue=0x6}) 19:22:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 19:22:49 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x101000, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000440)=0x1ff, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf10001, 0xeffffdef) write$apparmor_current(r2, &(0x7f0000000140)=@profile={'changeprofile ', '/dev/vbi#\x00'}, 0x18) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x0, 0x1, 0x0, [], [{0x2, 0x81, 0x0, 0x1, 0x2, 0x40}, {0x9, 0xffffffffffffffe0, 0x9, 0x5, 0x0, 0x6}], [[]]}) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f0000000040)={0x65, 0x8}) close(r2) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) [ 439.399606][T17814] binder: 17806:17814 ioctl c0306201 20000440 returned -14 19:22:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x6c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x74000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 439.486196][T17825] binder: 17822:17825 ioctl c0306201 20000440 returned -14 19:22:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x7a000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 439.563966][T17829] binder: 17828:17829 ioctl c0306201 20000440 returned -14 19:22:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 439.633521][T17832] binder: 17830:17832 ioctl c0306201 20000440 returned -14 19:22:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 439.708592][T17836] binder: 17835:17836 ioctl c0306201 20000440 returned -14 19:22:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 439.776668][T17839] binder: 17838:17839 ioctl c0306201 20000440 returned -14 [ 439.786390][T17839] binder: 17838:17839 ioctl c0306201 20000440 returned -14 [ 439.867992][T17843] binder: 17842:17843 ioctl c0306201 20000440 returned -14 19:22:52 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 19:22:52 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb, &(0x7f00000000c0)='clear_refs\x00'}, 0x30) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f00000001c0)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000000200)='cgroup\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r2, 0x0, 0x1) 19:22:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:52 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) prctl$PR_GET_DUMPABLE(0x3) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:22:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 19:22:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x200000, 0x0) shutdown(r2, 0x1) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x5, 0x8}]}, 0xc, 0x3) accept4$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000340)={{{@in=@remote, @in6=@empty, 0x4e21, 0x200, 0x4e23, 0x0, 0x2, 0x20, 0x20, 0x5e, r5, r6}, {0x8000, 0x3, 0x1, 0x6, 0x2, 0x7, 0x8001, 0x6}, {0x200, 0x9df9, 0xa11, 0x6}, 0x2, 0x6e6bb6, 0x2, 0x0, 0x1, 0x3}, {{@in=@remote, 0x4d3, 0xff}, 0x2, @in6=@ipv4={[], [], @multicast1}, 0x3505, 0x4, 0x2, 0x1, 0x6, 0x3f, 0x101}}, 0xe8) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r1, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_ifreq(r2, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) [ 442.462590][T17860] binder_transaction: 9 callbacks suppressed [ 442.462621][T17860] binder: 17853:17860 transaction failed 29189/-22, size 24-0 line 2903 [ 442.492650][T17860] binder: 17853:17860 ioctl c0306201 20000440 returned -14 19:22:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 442.510041][T17865] device eql entered promiscuous mode [ 442.618623][T17873] binder: 17872:17873 transaction failed 29189/-22, size 24-0 line 2903 [ 442.626991][T17873] binder: 17872:17873 ioctl c0306201 20000440 returned -14 19:22:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 442.755250][T17877] binder: 17875:17877 transaction failed 29189/-22, size 24-0 line 2903 [ 442.786098][T17877] binder: 17875:17877 ioctl c0306201 20000440 returned -14 19:22:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 442.930616][T17881] binder: 17879:17881 transaction failed 29189/-22, size 24-0 line 2903 [ 442.943974][T17881] binder: 17879:17881 ioctl c0306201 20000440 returned -14 19:22:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0xa00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x80007, 0x9) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x4e22, 0xfffffffffffff1ec, @dev={0xfe, 0x80, [], 0x29}, 0x9}, {0xa, 0x4e23, 0x6, @empty, 0xfffffffffffffff8}, 0x81, [0x1f, 0x80000001, 0x9, 0x2, 0x0, 0x3, 0x5, 0x7]}, 0x5c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r3, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r2, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) 19:22:53 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x7) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x2501, 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000100)='U', 0x1}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r2, r2, 0x0, 0x1) [ 443.062501][T17885] binder: 17884:17885 transaction failed 29189/-22, size 24-0 line 2903 [ 443.088944][T17885] binder: 17884:17885 ioctl c0306201 20000440 returned -14 [ 443.210356][T17888] device eql entered promiscuous mode 19:22:55 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 19:22:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x1200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:55 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000040)) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000140)={0x8057}) 19:22:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 19:22:55 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') getpeername$llc(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f00000001c0)={{0x2, 0x0, 0x7, 0x3, 0x3}, 0xe387, 0x7, 0x679}) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r2, 0x0, 0x1) connect$llc(r2, &(0x7f0000000140)={0x1a, 0x33f, 0x40, 0xbd, 0xffffffff, 0x1, @remote}, 0x10) 19:22:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)={0x3, 0x8, 0x81}) chroot(&(0x7f0000000140)='./file0\x00') [ 445.481743][T17911] binder: 17904:17911 transaction failed 29189/-22, size 24-0 line 2903 [ 445.502726][T17911] binder: 17904:17911 ioctl c0306201 20000440 returned -14 19:22:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x4800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 445.548677][T17917] device eql entered promiscuous mode 19:22:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 445.645451][T17922] binder: 17921:17922 transaction failed 29189/-22, size 24-0 line 2903 [ 445.669402][T17922] binder: 17921:17922 ioctl c0306201 20000440 returned -14 [ 445.799393][T17926] binder: 17925:17926 transaction failed 29189/-22, size 24-0 line 2903 [ 445.823976][T17926] binder: 17925:17926 ioctl c0306201 20000440 returned -14 19:22:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x6800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r3, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r2, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) r4 = fcntl$dupfd(r0, 0x406, r1) ioctl$KVM_SMI(r4, 0xaeb7) 19:22:55 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') write$apparmor_current(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303059d2e40bd860c1b0de17b202b4fd79c2a82148817119e330335e737461740073746174002740002c2100636c65617261740076626f786e6574315e5e63707573657470726f632900630000000000000000"], 0x60) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') arch_prctl$ARCH_GET_CPUID(0x1011) sendfile(r0, r1, 0x0, 0x1) 19:22:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x6c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 446.002753][T17930] binder: 17929:17930 transaction failed 29189/-22, size 24-0 line 2903 [ 446.025091][T17930] binder: 17929:17930 ioctl c0306201 20000440 returned -14 [ 446.126446][T17939] binder: 17938:17939 transaction failed 29189/-22, size 24-0 line 2903 [ 446.145033][T17939] binder: 17938:17939 ioctl c0306201 20000440 returned -14 [ 446.153337][T17940] device eql entered promiscuous mode 19:22:58 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 19:22:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x7400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:58 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x20, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43b, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x7fff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffc) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000340)) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000240)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000140)) ftruncate(r0, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x70815954, 0xc, 0x3, "c7885b37e8eeb135bedd4ef9c9f6721aae3ffe27febb6296f78d304150205112", 0x34324142}) bind$alg(r1, 0x0, 0x2) 19:22:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 19:22:58 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@int=0x80000000, 0x4) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x1) 19:22:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000040)={0x2, 0x8, 0x54}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r3, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r2, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_ivalue=0x1}) 19:22:58 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 448.562035][T17958] binder: 17951:17958 transaction failed 29189/-22, size 24-0 line 2903 [ 448.591328][T17958] binder: 17951:17958 ioctl c0306201 20000440 returned -14 19:22:58 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000012c0)={'mangle\x00', 0x1000, "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"}, &(0x7f0000000040)=0x1024) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:22:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x7a00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:58 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 448.771150][T17978] binder: 17975:17978 transaction failed 29189/-22, size 24-0 line 2903 [ 448.794375][T17978] binder: 17975:17978 ioctl c0306201 20000440 returned -14 19:22:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:58 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 19:22:58 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 19:22:58 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 448.913627][T17988] binder: 17985:17988 transaction failed 29189/-22, size 24-0 line 2903 [ 448.944916][T17988] binder: 17985:17988 ioctl c0306201 20000440 returned -14 19:22:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 449.104530][T18001] binder: 17998:18001 transaction failed 29189/-22, size 24-0 line 2903 [ 449.143430][T18001] binder: 17998:18001 ioctl c0306201 20000440 returned -14 [ 449.193367][T18001] binder: 17998:18001 transaction failed 29189/-22, size 24-0 line 2903 [ 449.213462][T18001] binder: 17998:18001 ioctl c0306201 20000440 returned -14 19:22:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 19:22:59 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x23) ptrace$cont(0x18, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, 0x0, 0x0, 0x0) 19:22:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:59 executing program 4: mlockall(0x1) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = epoll_create(0x33e20b4e) lseek(r0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r2, 0x0, 0x1) [ 449.420050][T18012] binder: 18010:18012 transaction failed 29189/-22, size 24-0 line 2903 [ 449.447219][T18012] binder: 18010:18012 ioctl c0306201 20000440 returned -14 19:22:59 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x2f3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r0, &(0x7f0000000140)=0xf10001, 0xeffffdef) close(r0) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(r1, 0x0, 0x0) 19:22:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f023c123f3188a070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r1, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) 19:22:59 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x23) ptrace$cont(0x18, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, 0x0, 0x0, 0x0) 19:22:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:59 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x23) ptrace$cont(0x18, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, 0x0, 0x0, 0x0) [ 449.604981][T18031] binder: 18026:18031 transaction failed 29189/-22, size 24-0 line 2903 [ 449.629667][T18031] binder: 18026:18031 ioctl c0306201 20000440 returned -14 19:22:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:22:59 executing program 2: r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 19:22:59 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xfffffffffffffffe, 0x0, 0xffffffffffffff51) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x3, 0x5, 0x400, 0x6}, &(0x7f0000000040)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x8, 0x0, 0x1, 0x6, 0x7, 0x5, 0x1000, 0x8000, r2}, 0x20) [ 449.869459][T18044] binder: 18041:18044 transaction failed 29189/-22, size 24-0 line 2903 [ 449.909901][T18044] binder: 18041:18044 ioctl c0306201 20000440 returned -14 19:23:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:00 executing program 2: r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 19:23:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 19:23:00 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ff2000/0x4000)=nil, 0x4000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x1) 19:23:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 450.338089][T18063] binder: 18059:18063 transaction failed 29189/-22, size 24-0 line 2903 [ 450.353587][T18063] binder: 18059:18063 ioctl c0306201 20000440 returned -14 19:23:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x620, 0x2000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'bpq0\x00', 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r3, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r2, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x80000, 0x0) 19:23:00 executing program 2: r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 450.456279][T18070] binder: 18067:18070 transaction failed 29189/-22, size 24-0 line 2903 [ 450.477204][T18070] binder: 18067:18070 ioctl c0306201 20000440 returned -14 19:23:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:00 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 19:23:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 450.597887][T18078] device eql entered promiscuous mode [ 450.618968][T18080] binder: 18077:18080 ioctl c0306201 20000440 returned -14 [ 450.734125][T18086] binder: 18084:18086 ioctl c0306201 20000440 returned -14 19:23:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:00 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000240)={0x2, 0x0, [], {0x0, @reserved}}) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf10001, 0xeffffdef) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x80000001}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={r4, 0x8}, &(0x7f00000001c0)=0x8) close(r2) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:23:00 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 450.864258][T18094] binder: 18093:18094 ioctl c0306201 20000440 returned -14 19:23:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 451.052170][T18105] binder: 18102:18105 ioctl c0306201 20000440 returned -14 19:23:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 19:23:01 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e23, @multicast1}}, 0x80000000, 0xffffffff, 0x1, 0x9, 0x4}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000140)={r2, 0xffff, 0x6}, &(0x7f00000001c0)=0x8) 19:23:01 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 19:23:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) tee(r0, r0, 0x101, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) setxattr$trusted_overlay_origin(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)='trusted.overlay.origin\x00', &(0x7f0000000780)='y\x00', 0x2, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x3, 0x3d8, [0x0, 0x20000240, 0x200004a8, 0x200005e8], 0x0, &(0x7f0000000040), &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]}, 0x45b) preadv(r3, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) r4 = syz_open_dev$usb(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x401, 0x800) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, &(0x7f0000000280)={0x0, 0x0, 0x103, 0x5, {0x7, 0x8, 0x6, 0xffffffff}}) ioctl$sock_ifreq(r2, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f00000006c0)='y\x00', 0x2, 0x0) 19:23:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 451.326113][T18123] binder: 18120:18123 ioctl c0306201 20000440 returned -14 [ 451.342031][T18123] binder: 18120:18123 ioctl c0306201 20000440 returned -14 19:23:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:01 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 451.431980][T18130] device eql entered promiscuous mode 19:23:01 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 19:23:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 451.480886][T18134] binder: 18131:18134 ioctl c0306201 20000440 returned -14 [ 451.607717][T18140] binder: 18139:18140 ioctl c0306201 20000440 returned -14 19:23:01 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 19:23:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:01 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7f, 0x8001, 0x0, 0x10000000000, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x5, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x3) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) [ 451.869697][T18155] binder: 18150:18155 ioctl c0306201 20000440 returned -14 19:23:02 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 19:23:02 executing program 4: mlockall(0x8000000000000001) r0 = semget$private(0x0, 0x1, 0x4) semctl$SEM_INFO(r0, 0x5, 0x13, &(0x7f0000000040)=""/213) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') readahead(r1, 0x8001, 0x6) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x5, 0x0) sendfile(r2, r2, 0x0, 0x1) 19:23:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x6, &(0x7f0000000240)="0adc1f033cdccc90ea123f3188a070") ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000140)=0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000300)='/dev/admmidi#\x00', 0x40, 0x480000) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f0000000340)={@mcast2}, &(0x7f0000000380)=0x14) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f00000003c0)=r1) r3 = syz_open_procfs(r1, &(0x7f0000000180)='clear_refs\x00') socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r5, &(0x7f0000000040)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) r6 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) ioctl$NBD_DO_IT(r6, 0xab03) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendto$packet(r6, &(0x7f00000001c0)="6f6bc773289beaa12118cef3c2d7", 0xe, 0x20000000, &(0x7f00000002c0)={0x11, 0x10, r7, 0x1, 0xcb, 0x6, @link_local}, 0x14) ioctl$sock_ifreq(r4, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) 19:23:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 19:23:02 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 452.104425][T18168] binder: 18167:18168 ioctl c0306201 20000440 returned -14 19:23:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:02 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 452.217710][T18184] binder: 18183:18184 ioctl c0306201 20000440 returned -14 19:23:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:02 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 452.323486][T18192] binder: 18191:18192 ioctl c0306201 20000440 returned -14 [ 452.342194][T18195] cgroup: fork rejected by pids controller in /syz2 19:23:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 452.455315][T18201] binder: 18200:18201 ioctl c0306201 20000440 returned -14 19:23:02 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x7d13c944, 0x800) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:23:02 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 19:23:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:02 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x1) [ 452.680666][T18210] binder: 18209:18210 ioctl c0306201 20000440 returned -14 [ 452.726626][T18210] binder: 18209:18210 ioctl c0306201 20000440 returned -14 19:23:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)='Mp') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x2, &(0x7f0000000100)='%\x00'}, 0x30) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0x21030, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x800, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000880)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@initdev}}, &(0x7f0000000980)=0xe8) bind$can_raw(r3, &(0x7f00000009c0)={0x1d, r4}, 0x10) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0xae44, 0xffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r5, &(0x7f00000007c0)=[{&(0x7f0000000240)=""/116, 0xfffffffffffffe0e}, {&(0x7f00000002c0)=""/153, 0x22}, {&(0x7f0000000380)=""/183, 0xb7}, {&(0x7f0000000440)=""/238, 0xd3}, {&(0x7f0000000540)=""/172, 0xac}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f0000000600)=""/196, 0xc4}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f0000000700)=""/135, 0x87}], 0x9, 0x0) ioctl$sock_ifreq(r2, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) 19:23:02 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 19:23:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:02 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000040)=""/61) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x1) 19:23:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) [ 453.012258][T18232] binder: 18224:18232 ioctl c0306201 20000440 returned -14 19:23:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x4c00, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:03 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 453.056298][T18235] device eql entered promiscuous mode [ 453.104110][T18241] binder: 18237:18241 ioctl c0306201 20000440 returned -14 19:23:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x6800, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 453.236824][T18247] binder: 18246:18247 ioctl c0306201 20000440 returned -14 [ 453.255912][T18247] binder: 18246:18247 ioctl c0306201 20000440 returned -14 19:23:03 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000300), &(0x7f0000000780), &(0x7f00000007c0)=0x0) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x5, &(0x7f0000000680)=[{&(0x7f0000000240)="ec4a3d6f02c80b6b764a84710d2acf621809a4d1fb6797cc7be86f148322bcac2a2e54196583e3b67e6eb27bf5243e6c0319a557fc1b9cc92dd808ea46b1d6c567863e11c1f46c28a70b12fb497dc43059477377579b2e806dc3e193eee7ae4adf938e85f5d147c4424d2d542f34442448903d7397645e9f56f6078784d3ba05af6820bbfd8bb960a754224279814b67b733cb79ea6357f105001a153b66726c86fc35e59b421af9ca9903fc656efcd32a9d974c499023e84387fa89a86a", 0xbe, 0x1}, {&(0x7f0000000440)="0d173982e297ee8085bb6455f96942608d1710f0155b55a7f35aa224a0e15daa0d71b3d819a051c5047c32cb269dfeef6919cdb557c0997402ac00528117599b3eaf45c573958b14dc05f260ccb893e1deeaff345f9d22ce762607357c17626eda2fee7f427716cf48e4488f405b0283ede4e64a8ff5a7aec62be81c81ebe747d8c097d8603afcf47f268e57f4e27611e228dfbaa71e0711716289af70487ba4b021562b5d5d2a17231fe7ddc37d107cf33509a82719e78723ab78f17890f4aa4daaf1ec216cfdd6", 0xc8, 0x24fa72ee}, {&(0x7f0000000540)="e551ca2b48676814288f6d115a75272d4939ea0669868b261cb47d06b8e8287e6db1b46179d444fe5cca764eaff28f765ffeccb5923179f9f27460cbba81d994c577010ad402fc2754552a2c775b7da56f913a493df28d068a9c8c0212ecf5546d306bab4013e7be352e47b55bef340e6aceff3178f911af4df7a2ad253e09cd3d5637183cde98be71c8eb2b0db9ef68", 0x90, 0x7}, {&(0x7f0000000180)="39562ea44ec6704d07485b922012eb885c281b083bbb3d", 0x17, 0x1ff}, {&(0x7f0000000600)="c6b028191a5c302bb865138d0b21383d13d89563e53f1c4d9e293f192b31e1d47b92544244e33c7c9d3e9a71e04dd3cf4a1632dce29460aab3785aa20f0bc690af9297cf8c0f4616d7caf50cb2afacac2017f806f82bc4c7a29bf84c14a80d98c15b9b07", 0x64, 0x2}], 0x80008, &(0x7f0000000800)={[{@tails_off='tails=off'}, {@tails_off='tails=off'}, {@balloc_notest4='block-allocator=notest4'}, {@acl='acl'}, {@balloc_hashed_reloc='block-allocator=hashed_relocation'}, {@noacl='noacl'}, {@barrier_flush='barrier=flush'}, {@nolargeio='nolargeio'}], [{@uid_eq={'uid', 0x3d, r2}}, {@euid_eq={'euid', 0x3d, r3}}]}) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2, 0x4c7a3118}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:23:03 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 19:23:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 453.562260][T18254] binder: 18253:18254 ioctl c0306201 20000440 returned -14 19:23:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) 19:23:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x7400, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:03 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x1) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000040)=""/182, &(0x7f0000000100)=0xb6) 19:23:03 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 453.754684][T18276] binder_transaction: 20 callbacks suppressed [ 453.754725][T18276] binder: 18269:18276 transaction failed 29189/-22, size 24-0 line 2903 [ 453.792924][T18278] device eql entered promiscuous mode 19:23:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) [ 453.822993][T18276] binder: 18269:18276 ioctl c0306201 20000440 returned -14 19:23:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x7a00, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 453.960542][T18288] binder: 18287:18288 transaction failed 29189/-22, size 24-0 line 2903 [ 453.983259][T18288] binder: 18287:18288 ioctl c0306201 20000440 returned -14 [ 454.095416][T18294] binder: 18293:18294 transaction failed 29189/-22, size 24-0 line 2903 [ 454.117368][T18294] binder: 18293:18294 ioctl c0306201 20000440 returned -14 [ 454.145855][T18294] binder: 18293:18294 transaction failed 29189/-22, size 24-0 line 2903 [ 454.162379][T18294] binder: 18293:18294 ioctl c0306201 20000440 returned -14 19:23:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 454.254629][T18298] binder: 18297:18298 transaction failed 29189/-22, size 24-0 line 2903 [ 454.280466][T18298] binder: 18297:18298 ioctl c0306201 20000440 returned -14 [ 454.389716][T18306] binder: 18302:18306 transaction failed 29189/-22, size 24-0 line 2903 [ 454.409662][T18306] binder: 18302:18306 ioctl c0306201 20000440 returned -14 [ 454.423671][T18306] binder: 18302:18306 transaction failed 29189/-22, size 24-0 line 2903 [ 454.432168][T18306] binder: 18302:18306 ioctl c0306201 20000440 returned -14 19:23:04 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0xb2, "3eb26abb3c788bafd444b79ef743eeb8da0a4cb924c9df7d3e763d1f50043cd9388c4e5b37232620e8ad58248e1e5382c61af7a5d40ba5a67d35d028c6b1b648c882b4580c75f12cfa9ea2e7262a9edf902845c3291b81fec761e7a258e809f7a9b7b01f122afcdfb6b14128321c5f8a713560d07846f5436d0251d536aeac307d7f1765d0deef3804f10032d53b0414f96f17da54a3824ab9ff5e850b974831a417ac75cee020f24e56e4fb0c00ae2d37bc"}, &(0x7f0000000040)=0xba) accept4$llc(r0, &(0x7f00000002c0), &(0x7f0000000300)=0x10, 0x80000) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000240)={r2, 0x80}, &(0x7f0000000280)=0x8) close(r0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:23:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x40000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10400420}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x400, 0x70bd29, 0x25dfdbfd, {{}, 0x0, 0x4, 0x0, {0x8}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x800, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r4, &(0x7f0000000540)=[{&(0x7f0000000340)=""/157, 0x9d}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/50, 0x32}, {&(0x7f0000000440)=""/219, 0xdb}], 0x5, 0x0) ioctl$sock_ifreq(r3, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) 19:23:04 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') write(r0, &(0x7f00000001c0)="459e45564ed411685ed86075830e8f4a6d6c28e6119c6f58b3c6ec5fc83c86a2043559b6e3217723af61f25f2844fc7efc6e377c83d9083020cc7d2bc27cd655572d2cea5258abdeb769081215ffc7fb20cd99550352b12189f716627da4e0de3a336c1b2f713b6f24447878ba04e09ebc5244a652f23a5b3c0c5bff68d7aaa0624e8bf7bbdfb3e4c56fbb", 0x8b) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000280)={0x0, @bt={0x0, 0x98ea, 0x0, 0x1, 0x200, 0x8001, 0x9, 0xc2c, 0x401, 0x3d, 0x4, 0x5, 0x8001, 0x1000, 0x4, 0x9}}) sendfile(r0, r1, 0x0, 0x1) fsetxattr(r1, &(0x7f0000000100)=@random={'security.', 'bdev*wlan1(bdevz\x00'}, &(0x7f0000000140)='stat\x00', 0x5, 0x1) r2 = getpgrp(0xffffffffffffffff) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=0x0) kcmp(r2, r3, 0x7, r0, r1) 19:23:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 454.518419][T18315] binder: 18313:18315 transaction failed 29189/-22, size 24-0 line 2903 [ 454.538231][T18315] binder: 18313:18315 ioctl c0306201 20000440 returned -14 19:23:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 454.625641][T18324] binder: 18322:18324 transaction failed 29189/-22, size 24-0 line 2903 [ 454.634335][T18316] device eql entered promiscuous mode [ 454.642001][T18324] binder: 18322:18324 ioctl c0306201 20000440 returned -14 [ 454.653995][T18324] binder: 18322:18324 transaction failed 29189/-22, size 24-0 line 2903 [ 454.663300][T18324] binder: 18322:18324 ioctl c0306201 20000440 returned -14 [ 454.724590][T18328] binder: 18327:18328 ioctl c0306201 20000440 returned -14 [ 455.264354][T18323] vivid-002: kernel_thread() failed 19:23:06 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 19:23:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 19:23:06 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd+\xa7\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x1) 19:23:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) r3 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x6, 0x200000) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) write$FUSE_LK(r3, &(0x7f00000001c0)={0x28, 0x0, 0x7, {{0xffffffff, 0xffffffff, 0x2, r4}}}, 0x28) 19:23:06 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) rseq(&(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4, 0x4, 0x108c, 0x6}, 0x4}, 0x20, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0xfffffd49) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000240)="4791884302c610123970e8139978deae", 0x10) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000140)={0x7d, 0x0, [0x1ff, 0x3, 0x5, 0x5]}) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000440)) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:23:06 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) bind$alg(0xffffffffffffffff, 0x0, 0x0) [ 456.785194][T18349] binder: 18339:18349 ioctl c0306201 20000440 returned -14 [ 456.817733][T18354] device eql entered promiscuous mode 19:23:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 456.949679][T18360] binder: 18359:18360 ioctl c0306201 20000440 returned -14 19:23:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 457.110991][T18366] binder: 18365:18366 ioctl c0306201 20000440 returned -14 19:23:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x4c000000, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x200000, 0x0) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000240)={0x37f1, 0x1, 0x3, 0x0, 0x0, [{r0, 0x0, 0x5}, {r0, 0x0, 0xb289}, {r1, 0x0, 0xd6}]}) [ 457.251393][T18370] binder: 18369:18370 ioctl c0306201 20000440 returned -14 [ 457.370865][T18376] binder: 18375:18376 ioctl c0306201 20000440 returned -14 [ 457.448829][T18379] device eql entered promiscuous mode 19:23:09 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 19:23:09 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x1000}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r1, 0xd4d4}, 0x8) sendfile(0xffffffffffffffff, r0, 0x0, 0x1) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000000)={0xb5, &(0x7f00000001c0)="a8088b7ee160f20c586bd6723144c1ec6c6e459c42d68a1dbe10e9e3dbaf29bd0a60a4208293a71c66688e083dc854f5c8c7cfcf966d8f6d7e649e1021351e61aaf4c0c7a14288ff0561550504f64784045b5d72e98e44b295c8616889b32f4b002a6e7f009b7ac06e27f342dd004ea442a6beb437630d87e716d94f896c9bed6307762c4c2d6b18bb4dbe9f82acd627bbe38caebc4ac50f7df01ab99bab71801fe00c46c80229319f0da9c788ba34978141d7c8ec"}) 19:23:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x68000000, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 19:23:09 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) seccomp(0x1, 0x0, &(0x7f0000000040)={0xa, &(0x7f0000000140)=[{0x800, 0x5, 0x5ccc, 0x10000}, {0x1ff, 0x23, 0x128, 0x1ff}, {0xf192, 0x6, 0x1, 0x9}, {0x1, 0x7, 0x27e2, 0x5}, {0x4, 0x800, 0x1, 0xc2d3}, {0x5, 0x3, 0x85a2, 0x1}, {0x8, 0x2, 0x17bbd17, 0x5}, {0x80000001, 0x0, 0x4, 0x3ff}, {0x582, 0x88f, 0x6d2, 0x7}, {0x9, 0x9, 0x100000000, 0xfffffffffffffff8}]}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:23:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x40, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r3, 0x40044900, 0x80) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) [ 459.821909][T18393] binder_transaction: 6 callbacks suppressed [ 459.821925][T18393] binder: 18390:18393 transaction failed 29189/-22, size 24-0 line 2903 [ 459.846124][T18393] binder: 18390:18393 ioctl c0306201 20000440 returned -14 [ 459.891845][T18403] device eql entered promiscuous mode 19:23:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x6c000000, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x74000000, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 460.006496][T18407] binder: 18406:18407 transaction failed 29189/-22, size 24-0 line 2903 [ 460.015995][T18407] binder: 18406:18407 ioctl c0306201 20000440 returned -14 19:23:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x7a000000, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 460.111397][T18411] binder: 18410:18411 transaction failed 29189/-22, size 24-0 line 2903 [ 460.123975][T18411] binder: 18410:18411 ioctl c0306201 20000440 returned -14 [ 460.235882][T18414] binder: 18413:18414 transaction failed 29189/-22, size 24-0 line 2903 [ 460.253368][T18414] binder: 18413:18414 ioctl c0306201 20000440 returned -14 19:23:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 460.402282][T18418] binder: 18417:18418 transaction failed 29189/-22, size 24-0 line 2903 [ 460.416044][T18418] binder: 18417:18418 ioctl c0306201 20000440 returned -14 19:23:10 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x8}}, 0x5, 0x5}, &(0x7f0000000200)=0x90) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000400)={r1, 0x7a, "14826c7e1648e20c6608f7e0b728aa677e7752d429c87a1e1e1f44c279ce1b4890467f1121040516abac83c066d72f8f3d94ddba012de288867c2222f2e32aaa612b65f038b1c9603fc006bc5772c4fdabf89137d3a6775e146d573a1abc8fc9f74a73091e8c2c5a8cb387f277f1395d6299584e77904061cb40"}, &(0x7f0000000240)=0x82) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000002c0)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000280)=0x0) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, &(0x7f0000000140)=0xffffffffffffffe1, 0x4) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0xab24, 0x80) r4 = syz_open_procfs(r3, &(0x7f0000000040)='stat\x00') openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x8040, 0x0) sendfile(r2, r4, 0x0, 0xfffffffffffffffd) r5 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x3, 0x2) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'ip6gretap0\x00', 0x8000}) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000300), 0x2) [ 460.522377][T18422] binder: 18420:18422 transaction failed 29189/-22, size 24-0 line 2903 [ 460.534300][T18422] binder: 18420:18422 ioctl c0306201 20000440 returned -14 19:23:12 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 19:23:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x80, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/udmabuf\x00', 0x2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x400000, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x27, &(0x7f00000001c0), &(0x7f0000000240)=0x4) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) 19:23:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 19:23:12 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000180)={0x9e0004, 0x241, 0x9247, [], &(0x7f0000000140)={0x9f0957, 0x9, [], @string=&(0x7f0000000040)=0x800}}) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:23:12 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0xc3e, 0x301000) ioctl$CAPI_SET_FLAGS(r0, 0x80044324, &(0x7f00000000c0)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x7ff, 0x83f3}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={r4, 0x6, 0x20}, 0xc) [ 462.920933][T18442] binder: 18437:18442 transaction failed 29189/-22, size 24-0 line 2903 [ 462.931912][T18442] binder: 18437:18442 ioctl c0306201 20000440 returned -14 19:23:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:13 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 463.001055][T18449] device eql entered promiscuous mode [ 463.035422][T18452] binder: 18451:18452 transaction failed 29189/-22, size 24-0 line 2903 [ 463.044241][T18452] binder: 18451:18452 ioctl c0306201 20000440 returned -14 19:23:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 463.150690][T18459] binder: 18458:18459 transaction failed 29189/-22, size 24-0 line 2903 [ 463.162406][T18459] binder: 18458:18459 ioctl c0306201 20000440 returned -14 19:23:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 463.261599][T18462] binder: 18461:18462 transaction failed 29189/-22, size 24-0 line 2903 [ 463.274854][T18462] binder: 18461:18462 ioctl c0306201 20000440 returned -14 [ 463.284648][T18462] binder: 18461:18462 ioctl c0306201 20000440 returned -14 [ 463.411813][T18466] binder: 18465:18466 ioctl c0306201 20000440 returned -14 19:23:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0xa00000000000000, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x1200000000000000, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 463.554435][T18470] binder: 18469:18470 ioctl c0306201 20000440 returned -14 19:23:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8910, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) 19:23:13 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x1) [ 463.663731][T18477] binder: 18471:18477 ioctl c0306201 20000440 returned -14 19:23:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 19:23:13 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x5, 0x30}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={r1, @in={{0x2, 0x4e24, @local}}, 0x8, 0x9}, 0x90) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r0, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(r0, 0x0, 0xffffffffffffffa8) 19:23:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x4800000000000000, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 463.840559][T18490] binder: 18487:18490 ioctl c0306201 20000440 returned -14 19:23:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 463.932631][T18496] binder: 18494:18496 ioctl c0306201 20000440 returned -14 19:23:16 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 19:23:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x6800000000000000, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:16 executing program 4: mlockall(0x8000000000000001) r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000140)={r1, 0x32}) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) getpeername$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) timerfd_gettime(r2, &(0x7f00000001c0)) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000200)={0x2ab, 0x3}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000240)={{0x2}, 'port1\x00', 0x41, 0x10001, 0x7ff, 0xff, 0x6, 0x9, 0x4, 0x0, 0x4, 0x81}) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r3, r4, 0x0, 0x1) 19:23:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x8, 0x10040) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000480)={0x3, 0x401}) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x6}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r3, 0x28, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @local}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5d}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7fffffff}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x33}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x81) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000380)={0x0, 0xfaa9, 0x9, 0x1}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000400)=@assoc_value={r4, 0x6c4a}, &(0x7f0000000440)=0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r5, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) 19:23:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 19:23:16 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0xf, 0x102, 0x1, {0x8, 0x7f, 0x1, 0x3}}) getpeername$netlink(r1, &(0x7f0000000140), &(0x7f0000000180)=0xc) socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) [ 466.151085][T18518] binder_transaction: 6 callbacks suppressed [ 466.151102][T18518] binder: 18514:18518 transaction failed 29189/-22, size 24-0 line 2903 [ 466.167441][T18518] binder: 18514:18518 ioctl c0306201 20000440 returned -14 19:23:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x6c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:16 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 466.255860][T18526] device eql entered promiscuous mode 19:23:16 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 466.338741][T18534] binder: 18531:18534 transaction failed 29189/-22, size 24-0 line 2903 [ 466.355785][T18534] binder: 18531:18534 ioctl c0306201 20000440 returned -14 19:23:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x7400000000000000, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 466.562897][T18542] binder: 18540:18542 transaction failed 29189/-22, size 24-0 line 2903 [ 466.593750][T18542] binder: 18540:18542 ioctl c0306201 20000440 returned -14 [ 466.625315][T18542] binder: 18540:18542 transaction failed 29189/-22, size 24-0 line 2903 [ 466.663564][T18542] binder: 18540:18542 ioctl c0306201 20000440 returned -14 19:23:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x7a00000000000000, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:16 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x7}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) sendfile(r0, r1, 0x0, 0x1) 19:23:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 466.783092][T18546] binder: 18545:18546 transaction failed 29189/-22, size 24-0 line 2903 [ 466.791602][T18546] binder: 18545:18546 ioctl c0306201 20000440 returned -14 19:23:16 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) r2 = syz_open_dev$swradio(&(0x7f00000002c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$RTC_UIE_ON(r2, 0x7003) io_setup(0x9, &(0x7f0000000040)=0x0) io_cancel(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x41cc, r0, &(0x7f0000000140)="70c919527bea781efe759260f9bb556a4e4d85867b95411b679a1acbd14575268447beab30d10a641aa674360609aa905f97a582ce8902c3621a6bdddc33a2f6526333df794c2ed15782efcd056f95bdbd08a43ef0bca64ed25f5c1d40e1f619b35ba26abb262fe13f5cdee332d06c6ec4c29e51025a289a630bc5970836af600207d3c61763cf4609e77fa7da9132a986550634f4d38a16fce5dfd0c7f2029b394bff68cf51f817cd2f8acfb4ce5cc4f165faa63d91a2f73372195e0960f350", 0xc0, 0x609f7e83, 0x0, 0x0, r0}, &(0x7f0000000280)) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:23:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'teql0\x00', 0x10}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) [ 466.910381][T18554] binder: 18551:18554 transaction failed 29189/-22, size 24-0 line 2903 [ 466.927709][T18554] binder: 18551:18554 ioctl c0306201 20000440 returned -14 19:23:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 19:23:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@caif=@dgm={0x25, 0xff, 0xfffffffffffffffa}, 0x80, &(0x7f0000000880)=[{&(0x7f00000002c0)="b82bfbc3bf8c8f2c39df7fb934e70b8afa2eb44d8f2be25ed0ab9e6f1c24e1a7fdab978d2fcdd7219773e242a0d94d2bdd2fd30230603ac253ca5e762cebcb7c5398d4fb193d4656e7f2f830ab0aabd0e458fac253bf5a37c60ae7477bb706e4fb69f692eecc49100add3f8b0f99026dd7530cd1749b684ce2ae0b2ac7771fca5e73e8ef690f6364d0bfb4653b84303fed3a20ed", 0x94}, {&(0x7f0000000380)="5d810f699d962c4fc473aac6078226304f700d6e651a4e8d3b359b63b9319f05734b4c545e4e05abe0c2764ca5fa50e74fd0280066354d92bf35d2cb20e796972d6ca64167dd74ad618215ab75de376d181c73bea42badc9e3a25d5e5119368eb8a62afa050f7cdab723547a515001375459c19c60af700dd1a35e206a74b329f2e455cd200c72994c6ef97f50", 0x8d}, {&(0x7f0000000440)="4e293a88ca354b4a6707a6b94bcc3af356a220d28e05d12c6aad4d0814d8434d0d3931d8bdbc61f605a3d8fd23d7a1453e75efd4ed42052f6d3c0a9efb50ec22dae6b6f9d9ca184dc2885338f46272b408309cd14a59c944e7a2fedb4880173f11cccc47cf0c486928c5ac27b608dca4734dddd155fb72d171946fb9a633372900dbe7c3", 0x84}, {&(0x7f0000000500)="1bbb20452e2f3f0577b8c53a1fc22fc92b3febbe5d80fec8d2e54bf54f7becb023e8c09e3c8d388a6c3ce82860ae48779574ab9a458abfa35a673ed1de53b7b4300d4ca19207da2924b0e3a5e6118da442fdda76cc933c1274fd38b93fdbfac1623b972ac4d164", 0x67}, {&(0x7f0000000580)="b82a664f1faf96a9e249a22955cf5c930e9019ea7af2026c36346ee368da8c826e18fdc41191256ef288cfe2abcae8cfe8295422577ef35f80351b92b391f35b7892e726508af6ae31", 0x49}, {&(0x7f0000000600)="af66cd7f1ef4a909d54d8f2a9cf1582e26324af286842515feacc04a6d1fe167c23a934c7b13de7124a6f4211776000ba8bada93db2b4274bad7c4bdc099a841f34f338c66460e7c60a643b5ca8e310d658e6eef0ac32f3faa114b172416d71cfb8916829505c52e5b32370293f790d21b6715b594571f16f20c7b825ca88da59d9bef3dfc9d8e9c3278b782afcc88ca534d01db76a76e75800678a4b712a9152d0b7894be520a01601be078993e2ffe324186c0498c178ee1a5a124b1", 0xbd}, {&(0x7f00000006c0)="214c6f6a72b9909c9db26fcc7cad6a8ac0ecfdc83a4ff8f65e28538582e2a94c1ad6f3a9f62cbd2872da75c7cb50d9e8183a838efae22f649f323616b4fb866b93eae64d1c15f296975e5c9a0d51080f70d858b2d5eb15b67b6f99fe241c41c300ab81742d0f4f5b604813c8f1276bada2b590366c4ea1e4435011a26f208ad94ef5c813c5b4e8ffd6b0dd6796bebc7fe3398ea87c3a345081901480c0688a81f9886855a6049cfa57f7d3d46a5c0b3a8faf91471e674f1ef79f1ada016e", 0xbe}, {&(0x7f0000000780)="5a78e281db262c5e5c34402e835f9682420f3c1acdf2890f04e94bf16972bc017c4ddcc33a9a79dd9cc299e9e642e81aa5c33ecfdd143aca8b5acc36f7be2ec70527d1b59807043e058e62c2ed7108498e895893d267d81432271b66c2372a2e1b533b9a19a3b0aa8f359f2715e984753f87d64edc3e4acdb5d8503e98e416fb8d38bb483abe2a25016dcd4178ccea8b2d349e77836412462d083fe4b07b5edfcc6c6743eed58fa87edcd03292ffaa9e8d2df08c2ad360ed86b60550c00917788b857960c170f96236b092d78ab23d6a425041a6acda398acd5f0f05317b6be5b0b8ad9d25430a9d11", 0xe9}], 0x8, &(0x7f00000013c0)=[{0xe0, 0x10e, 0x0, "1a9aa6184241f44cc4ce7423fb0c5afdd973c5ecc132500279e8cbc4ed530dc450e1042319f4d9d6c553e6b5ce7583294a533052bab3da2276d84a706c589ff379448a29b3e6b0c1033d7131275943940c706d028eedc3c7cad995dcbabb28d5aff910b987ea0b50930ea438cb85f5216f9a51cbb4d7e7ef8d8b7830f6cae3098e23b72333ecb2d02a178feed4452859dd9e65ad2d718e6e961658814d82475fc8a0d0c7261eb01137ee37fa97a657071f01c5b6fa84ec4e3a3c4adc95a6b73ce434b7fb035eb3dcdf1a8091"}, {0x30, 0x117, 0x632c, "805c9025102b984d648d5df64628508f6c5698427297e6676c"}, {0xa8, 0x107, 0x9, "b2dbbf79370fdfcdb2dc975c36b8a7fe29287be3bae0336860fa66840559685afce11cc4d68e3053dbdbc8dd93d7b208f5c32792e18aafb29556a88c755e4aafb879cce345d27a1c65a47060b3c5135d3cedd13c5efe1e42bbfc92ed027846c092b3040f88dd8f5b03d8b4340ebe3c974f010d5644f9b66d6ae71650b375e653e8ab7f9e3a17a54059ab8f08c60dba057d836cbf79bd1dd2"}, {0xb8, 0x13a, 0x7, "29bf7a64694c9c5e1b8053021a4e6407a55e29e90c2119807dc0532a78bfe03334edd16046247968579e182fbf5aec8fc3ed9b2a749d605559086885005b9421fc12b38c1a3a41a4af8ab661ba1bba4b1198658edd5a4881735cef07f0baab899f9f254b1ddd6d21b8b1a5a57c6e42843d55084271cc5d7a248a2645d2d18a16019abf31f3717772f2097eba29cbf54453746866bb0519460b2dd47d5fe32f4df4f1f190e12e013c"}, {0x58, 0x10e, 0xffffffff7fffffff, "93b41558b5dba29fdf77d794ea7e9ff26a068a71b5e90fd343990678f0d1bb2e92d4eca3782261cc00e83005317039d38c33bdcecc1e28f90f9e3bdcd258eef2c8b732f6"}, {0x1010, 0x10e, 0x5, "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"}, {0x68, 0x101, 0x8000, "4742fca091d50266e4aa0b050fc56c6c166a975c776ddc81f490678e73c3f307816735ec7ca32fa159013baae6095e37fe164a8cf7cd1f53221deaa847c66debc3ac8816f6674d4532889651e87b03ef87"}], 0x1340}, 0x20008010) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r3, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x262000, 0x0) sendmsg$kcm(r4, &(0x7f0000000ac0)={&(0x7f0000000900)=@x25={0x9, @null=' \x00'}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000980)="b10f4977dd87bae8984914bd7795fae29f1c8064e104814a782fc1ac05e53c8127b4cf1b83c612e76f3f2ab60f233c537265f113768b9e9b4caa8ad7ffc7dfa8a915b98f885c689fc84b34d7820c2f53ac85db4928160290a857a190c80faa63878c5b7536fcae65d03e6ca6c05a3f4dce5378c1954b10667a7b0430ca9732bd6c5f5e895ae4c311fd15aa9c6fe205a42c035312c53760e28a258810734b860ebfc3558ae39147a6e938841c298e1ca3c2b0feac17b9d954af538ef3d64782cba41b36b39edbdcf7185630d406bc9072d89e13cb4e895ae143f5150f84e5edcb", 0xe0}, {&(0x7f00000001c0)="4ff5ad1ad8e590e53691d9b245d38579e0b9e583ac5900052ab6e5b2e30dc4", 0x1f}], 0x2}, 0x801) ioctl$sock_ifreq(r2, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) [ 467.158007][T18575] binder: 18572:18575 transaction failed 29189/-22, size 24-0 line 2903 [ 467.187184][T18575] binder: 18572:18575 ioctl c0306201 20000440 returned -14 19:23:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 467.304358][T18583] device eql entered promiscuous mode [ 467.311592][T18582] binder: 18581:18582 transaction failed 29189/-22, size 24-0 line 2903 [ 467.327442][T18582] binder: 18581:18582 ioctl c0306201 20000440 returned -14 [ 467.433143][T18588] binder: 18587:18588 transaction failed 29189/-22, size 24-0 line 2903 [ 467.443193][T18588] binder: 18587:18588 ioctl c0306201 20000440 returned -14 19:23:19 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 19:23:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:19 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) write$P9_RVERSION(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1500000065c78c0f6f63ffff1e01f90008003950321030302e75"], 0x15) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x400, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000000c0)={0x100000000, 0xe, 0x4, 0x100, {0x77359400}, {0x4, 0x0, 0xffffffffffff4ad7, 0x6, 0x9, 0x5, "969d2cb1"}, 0x2, 0x0, @offset=0xafb3, 0x4}) fsync(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r2, 0x0, 0x1) 19:23:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) 19:23:19 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x4805) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r3, 0x1000000) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000006c0)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000000500)=0xe8) fsetxattr$security_capability(r0, &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v3={0x3000000, [{0x5, 0x3424}, {0x9, 0x8000}], r4}, 0x18, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f0000000300)=0xeaef, 0x8) sendfile(r1, r3, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x5, 0x3, &(0x7f0000000440)=[{&(0x7f0000000180)="49bd85354900317f20faa5627843154783f1ff86cee35d414af85535044db0e7bb74e8a9d65383", 0x27, 0x8}, {&(0x7f00000001c0)="e33787de5e051e868a0860df4c88a7831b0f75253cfe89cbb210fee05e153eb23ef309", 0x23, 0x7f}, {&(0x7f0000000240)="049dd7b2af3d99fc45ad6fdebe3fae522cf0c579e409cca5b380254df3e66587c847c291fb5bc2c77249cdfb2d7373b475241bc75d6ebba80cb1a9764411cdd16ee68400a8b8bdf73eba14a58278eae0158281bb7c4efe302bd7d47586a2da74626dcc5a7a74eb9612442960116e2e4ed80036e72c2be81edd1f9b34988711889a1f787e0236f67a5fde1b5f97a5c3dc", 0x90}], 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="64656275672c646f74732c6673757569643d6634677d04007b772d3f757f322d3337377b2d773833362d71357733753500312c61707072616973655f747970653d696d617379672c66736e616d653d2c003aacc44429a96340818e1e053f27094eae5a4d6cb8cba439fe7cde1e93fc3bb9d1c979441496ced631cca0da5b4fb28347c50c1d76213a704d091efbc910fb45004946970e7dc6f5fd01cc86dbfde49619873cc79103f78e5be299233381ec2dca9eb8913e25020d073037bf0d878a4abf72925e48d76d771d85f748a235f1bf6ee47dd77108d5e3eb31d707eda9225fb3082219e90d46083a4f69e5d57aef32bac2f1747985"]) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:23:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) [ 469.506871][T18605] binder: 18596:18605 transaction failed 29189/-22, size 24-0 line 2903 [ 469.545204][T18605] binder: 18596:18605 ioctl c0306201 20000440 returned -14 19:23:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 469.590438][T18612] device eql entered promiscuous mode [ 469.626979][T18613] FAT-fs (loop1): Unrecognized mount option "fsuuid=f4g}" or missing value 19:23:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 469.654169][T18618] binder: 18616:18618 ioctl c0306201 20000440 returned -14 [ 469.673104][T18618] binder: 18616:18618 ioctl c0306201 20000440 returned -14 19:23:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 469.763358][T18624] binder: 18623:18624 ioctl c0306201 20000440 returned -14 19:23:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 469.834758][T18628] binder: 18626:18628 ioctl c0306201 20000440 returned -14 19:23:19 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x1) finit_module(r0, &(0x7f0000000040)='clear_refs\x00', 0x1) 19:23:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 469.914676][T18631] binder: 18630:18631 ioctl c0306201 20000440 returned -14 [ 470.008898][T18637] binder: 18633:18637 ioctl c0306201 20000440 returned -14 [ 470.027163][T18637] binder: 18633:18637 ioctl c0306201 20000440 returned -14 19:23:22 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 19:23:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:22 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) get_thread_area(&(0x7f0000000040)={0x80000001, 0x20001000, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x3f, 0xfffffffffffff000, 0x6, 0x8000}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:23:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000140)) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) 19:23:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0x10f5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 19:23:22 executing program 4: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-monitor\x00', 0x20400, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f00000003c0)={0xffffffffffff6a19, 0x0, [], {0x0, @reserved}}) mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @multicast1}}, 0x7f, 0x3}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000001c0)={r2, 0xd8, "6089cb99ba49df6caa27ee70744467e68c93e091df652f606a49b0752f244cdf180af0dfed7798dcb1deac3564b49fb591d8a60ab99c3ad824251d8c668aa418a2716161a710164f5f2e0771fe0f516429e8f3abcdf1085570d0702050249cb3ab9b1a830dcf345202aba0c6eff7d0f2e8991b1a35bd8abf922cf6b64a4f93859a283c85dc22d59cfb4a2f22366952784ad4a19df1e20ec74cac267290f74ec2fb6bb720a6c33c20eb520c4137e896774f9ec2ff6093f586f2c068d2a282c1b38c716c5aab77e303746c2a23416e5a994dd5ce00c0db9628"}, &(0x7f0000000140)=0xe0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f00000002c0)) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r3, 0x0, 0x23) 19:23:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 472.586649][T18659] binder_transaction: 7 callbacks suppressed [ 472.586665][T18659] binder: 18655:18659 transaction failed 29189/-22, size 24-0 line 2903 [ 472.610152][T18659] binder: 18655:18659 ioctl c0306201 20000440 returned -14 19:23:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 472.657273][T18669] device eql entered promiscuous mode [ 472.669851][T18670] binder: 18668:18670 transaction failed 29189/-22, size 24-0 line 2903 [ 472.678813][T18670] binder: 18668:18670 ioctl c0306201 20000440 returned -14 19:23:22 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 19:23:22 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 472.801626][T18676] binder: 18673:18676 transaction failed 29189/-22, size 24-0 line 2903 [ 472.832310][T18676] binder: 18673:18676 ioctl c0306201 20000440 returned -14 19:23:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 473.001265][T18686] binder: 18683:18686 transaction failed 29189/-22, size 24-0 line 2903 [ 473.042157][T18686] binder: 18683:18686 ioctl c0306201 20000440 returned -14 [ 473.073260][T18686] binder: 18683:18686 transaction failed 29189/-22, size 24-0 line 2903 [ 473.104125][T18686] binder: 18683:18686 ioctl c0306201 20000440 returned -14 19:23:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x800, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x527100, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) [ 473.242369][T18690] binder: 18689:18690 transaction failed 29189/-22, size 24-0 line 2903 [ 473.252082][T18690] binder: 18689:18690 ioctl c0306201 20000440 returned -14 19:23:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:23 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000140)=0x4) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:23:23 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') [ 473.361146][T18700] binder: 18698:18700 transaction failed 29189/-22, size 24-0 line 2903 [ 473.377935][T18700] binder: 18698:18700 ioctl c0306201 20000440 returned -14 [ 473.408910][T18705] device eql entered promiscuous mode 19:23:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0x20000435}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 19:23:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 473.559640][T18715] binder: 18714:18715 transaction failed 29189/-22, size 24-0 line 2903 [ 473.583234][T18715] binder: 18714:18715 ioctl c0306201 20000440 returned -14 [ 473.706884][T18721] binder: 18719:18721 transaction failed 29189/-22, size 24-0 line 2903 [ 473.717284][T18721] binder: 18719:18721 ioctl c0306201 20000440 returned -14 19:23:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 473.860821][T18725] binder: 18723:18725 transaction failed 29189/-22, size 24-0 line 2903 [ 473.895713][T18725] binder: 18723:18725 ioctl c0306201 20000440 returned -14 19:23:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 473.920040][T18725] binder: 18723:18725 ioctl c0306201 20000440 returned -14 [ 474.137130][T18730] binder: 18729:18730 ioctl c0306201 20000440 returned -14 [ 474.145168][T18730] binder: 18729:18730 ioctl c0306201 20000440 returned -14 19:23:25 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 19:23:25 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x1) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) 19:23:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x10000000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) 19:23:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:25 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bond0\x00', 0x10) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:23:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0x7ffff000}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 19:23:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x4c00, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 476.004150][T18741] binder: 18739:18741 ioctl c0306201 20000440 returned -14 [ 476.031636][T18745] device eql entered promiscuous mode 19:23:26 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 476.178149][T18756] binder: 18754:18756 ioctl c0306201 20000440 returned -14 19:23:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x6800, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:26 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 476.372377][T18765] binder: 18762:18765 ioctl c0306201 20000440 returned -14 19:23:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x6c00, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x7400, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 476.533510][T18770] binder: 18769:18770 ioctl c0306201 20000440 returned -14 [ 476.546454][T18770] binder: 18769:18770 ioctl c0306201 20000440 returned -14 19:23:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x7a00, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 476.633936][T18774] binder: 18773:18774 ioctl c0306201 20000440 returned -14 19:23:26 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x1) 19:23:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008913, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) [ 476.790659][T18781] binder: 18776:18781 ioctl c0306201 20000440 returned -14 19:23:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xffffffffffffffff}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 19:23:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:26 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000006c0)={'yam0\x00', 0x100}) r1 = syz_open_dev$media(&(0x7f0000000900)='/dev/media#\x00', 0x34a, 0x8001) accept$nfc_llcp(r1, 0x0, &(0x7f0000000940)) r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000980), &(0x7f00000009c0)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x33, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)={&(0x7f0000000040)='./file0\x00', r3}, 0x10) setxattr$security_smack_entry(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='security.SMACK64\x00', &(0x7f0000000680)='\xac\x00', 0x2, 0x3) r4 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) readlink(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)=""/24, 0x18) ioctl$KVM_S390_UCAS_MAP(r4, 0x4018ae50, &(0x7f0000000840)={0x95, 0xfffffffffffff801, 0x200}) ioctl$EVIOCGNAME(r4, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) r5 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r5, 0x1000000) sendfile(r4, r5, &(0x7f00000000c0)=0xf10001, 0xeffffdef) writev(r3, &(0x7f0000000500)=[{&(0x7f00000001c0)="0b45d0c815773db60b709907ec2be2c7ed2b4577bbc31853d3b297fa24b96b8ba0ee74bbe886a63eb7d7749c7d3b7faa02dda3cf716aed7433", 0x39}, {&(0x7f0000000240)="0af926d86a91a39859bfc2f96cf575466b5604e9146fd4bd66e5a20e2d24df16f5bfdb6da5a459357fbc64bfcccf145bc1ea9fda2d795663be2c45abcb31d2631de4fe87852b3a2fc9a05ade423348821c158bb9c011fda2c42e9f1dc9b59e572007dcc57aca5f3c4b1eeac22775fbde88d6901655e92c358d55b40ccb411d260f0cb048ce5913df2e8b0fd64c3378fef5d79b63ad67502bd4e658ab7081dca19e40e3754714446db22a8016c33355e5e1d42d3cad9cf93a5972d8a0076b8a8a154837bcd2d44e61be01dc60fcf496783fe9160e26b567307c1e9a579f18b7", 0xdf}, {&(0x7f0000000440)="95c79c681a77317eb48ccc59ecfb458c18b4620d659141dfcf48744ba405100551e42692c0349067bda8d5038fa4dbf2c55e10f7b43e6f8d51afa630", 0x3c}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f0000000480)="470986f7e4b94350b40944ee1bbad084d46435e2512bda34c2dd648de32aa910d4307d7e5adce1188414d5a0bce6b5465691b8671658b5aa89a95c0bdf6e6e9c7638c6d8d771957ebff82bf1517e6e4e346b", 0x52}], 0x5) r6 = creat(&(0x7f0000000580)='./file0\x00', 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000700)={0x0, 0x1}, &(0x7f0000000740)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000780)={r7, 0x20}, &(0x7f00000007c0)=0x8) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000800)) connect$inet(r6, &(0x7f00000005c0)={0x2, 0x4e21, @remote}, 0x10) close(r4) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000200)={0x10001, 0x9, 0x4}) bind$alg(r4, 0x0, 0xfe7b) [ 476.939675][T18789] device eql entered promiscuous mode [ 477.026193][T18795] binder: 18792:18795 ioctl c0306201 20000440 returned -14 19:23:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 477.194351][T18808] binder: 18806:18808 ioctl c0306201 20000440 returned -14 [ 477.213613][T18808] binder: 18806:18808 ioctl c0306201 20000440 returned -14 [ 477.345562][T18812] binder: 18811:18812 ioctl c0306201 20000440 returned -14 [ 477.373207][T18812] binder: 18811:18812 ioctl c0306201 20000440 returned -14 19:23:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 477.523427][T18816] binder: 18815:18816 ioctl c0306201 20000440 returned -14 19:23:29 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 19:23:29 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x1) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000040)=0x1, 0x4) 19:23:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x6, 0x10040) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000140)={0x9, 0xffffffffffff0000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r3, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r2, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) 19:23:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0xc0}], 0x2}}], 0x1, 0x0, 0x0) 19:23:29 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) fcntl$getflags(r0, 0x408) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) [ 479.409039][T18835] binder_transaction: 16 callbacks suppressed [ 479.409058][T18835] binder: 18826:18835 transaction failed 29189/-22, size 24-0 line 2903 19:23:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:29 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 479.461352][T18835] binder: 18826:18835 ioctl c0306201 20000440 returned -14 [ 479.491938][T18841] device eql entered promiscuous mode [ 479.630424][T18847] binder: 18845:18847 transaction failed 29189/-22, size 24-0 line 2903 [ 479.642367][T18847] binder: 18845:18847 ioctl c0306201 20000440 returned -14 19:23:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:29 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 479.780065][T18854] binder: 18853:18854 transaction failed 29189/-22, size 24-0 line 2903 [ 479.797324][T18854] binder: 18853:18854 ioctl c0306201 20000440 returned -14 19:23:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:29 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 479.931861][T18861] binder: 18859:18861 transaction failed 29189/-22, size 24-0 line 2903 [ 479.981906][T18861] binder: 18859:18861 ioctl c0306201 20000440 returned -14 19:23:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:30 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x101000) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r2, 0x0, 0x1) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) [ 480.149685][T18868] binder: 18867:18868 transaction failed 29189/-22, size 24-0 line 2903 [ 480.160006][T18868] binder: 18867:18868 ioctl c0306201 20000440 returned -14 [ 480.183616][T18868] binder: 18867:18868 transaction failed 29189/-22, size 24-0 line 2903 [ 480.192630][T18868] binder: 18867:18868 ioctl c0306201 20000440 returned -14 19:23:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0xf5}], 0x2}}], 0x1, 0x0, 0x0) 19:23:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = accept4(r3, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r4, 0x4, 0x2000) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') r6 = syz_open_dev$amidi(&(0x7f0000000640)='/dev/amidi#\x00', 0x3, 0x0) sendfile(r4, r5, 0x0, 0x10000000000443) writev(r4, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r4, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r4, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000740), 0x4) bind$xdp(r5, &(0x7f0000000380)={0x2c, 0x1, 0x0, 0x33}, 0x10) syz_open_dev$sndctrl(0x0, 0x0, 0x640801) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) r8 = dup(r1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40042409, 0x0) preadv(r7, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r2, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) 19:23:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:30 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000140)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'L-', 0x6}, 0x28, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000040)) [ 480.329016][T18883] binder: 18879:18883 transaction failed 29189/-22, size 24-0 line 2903 [ 480.366649][T18883] binder: 18879:18883 ioctl c0306201 20000440 returned -14 19:23:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x4c000000, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x68000000, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 480.467908][T18893] binder: 18891:18893 transaction failed 29189/-22, size 24-0 line 2903 [ 480.476622][T18893] binder: 18891:18893 ioctl c0306201 20000440 returned -14 19:23:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x6c000000, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 480.550761][T18897] binder: 18895:18897 transaction failed 29189/-22, size 24-0 line 2903 [ 480.559557][T18897] binder: 18895:18897 ioctl c0306201 20000440 returned -14 [ 480.590408][T18888] device eql entered promiscuous mode 19:23:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x74000000, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 480.629274][T18900] binder: 18899:18900 transaction failed 29189/-22, size 24-0 line 2903 [ 480.639381][T18900] binder: 18899:18900 ioctl c0306201 20000440 returned -14 19:23:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x7a000000, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 480.721703][T18904] binder: 18903:18904 ioctl c0306201 20000440 returned -14 [ 480.733482][T18904] binder: 18903:18904 ioctl c0306201 20000440 returned -14 [ 480.801965][T18908] binder: 18907:18908 ioctl c0306201 20000440 returned -14 19:23:32 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 19:23:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:32 executing program 4: mlockall(0x4000000001) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) write$UHID_INPUT2(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c000000e400e1ab48a51461e3885ab472b59af7492a9e1e5fc2e4b9035dd072c38c42670700711100cf71cc18a816849adb8195312a50d54874fa00d41987b4b866e0ad8e5ec685ebabf41a33e30f8c5500045d445e1dbba793134fa69c24c5b77954be1c7ebf6e8bc54a5b91999410d0d28db91735e58a594481b099af842635dbbd83abba56f8fb59596c1bb841c62bdf64ff31aca5688df34c89dea1e34e6155ddc94f01fa289f2b296fe1f12864fb091325c5db8178617b3e08e8042e706a6730bd193925c6c63a40a6d4812960fbb34f93049a1e93f496d199fe1768d265a68dd93fa40ff6fb5e38dedc7e15f6af3e530d78"], 0xea) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r2, 0x0, 0x1) 19:23:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x7cb}], 0x2}}], 0x1, 0x0, 0x0) 19:23:32 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000140)={0x0, 0x9, 0x3, 0x0, 0x4, 0x7fffffff}) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r0, 0x40000000000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:23:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000140)=0x8001) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'veth0_to_team\x00', @ifru_hwaddr=@broadcast}) [ 482.992815][T18925] binder: 18924:18925 ioctl c0306201 20000440 returned -14 19:23:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:33 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x56000, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000140)=0x1, 0x4) socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) [ 483.071551][T18932] device veth0_to_team entered promiscuous mode 19:23:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 483.156746][T18936] binder: 18935:18936 ioctl c0306201 20000440 returned -14 [ 483.183194][T18936] binder: 18935:18936 ioctl c0306201 20000440 returned -14 19:23:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 483.262781][T18944] binder: 18943:18944 ioctl c0306201 20000440 returned -14 19:23:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 483.338087][T18948] binder: 18947:18948 ioctl c0306201 20000440 returned -14 19:23:33 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x101}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={r1, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, [], 0x28}, 0x4}, @in6={0xa, 0x4e24, 0x7, @local, 0xffc00}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e23, 0x400, @empty, 0x6}]}, &(0x7f0000000280)=0x10) lsetxattr$security_selinux(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:fonts_t:s0\x00', 0x1d, 0x2) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f00000000c0)={0x82ff, 0x2}) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r2, 0x0, 0xffffffffffffffff) ioctl$KDDISABIO(r0, 0x4b37) [ 483.411836][T18951] binder: 18950:18951 ioctl c0306201 20000440 returned -14 19:23:35 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 19:23:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:35 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') sendfile(r0, r0, 0x0, 0x0) 19:23:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x900}], 0x2}}], 0x1, 0x0, 0x0) 19:23:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x82000, 0x0) ioctl$SIOCX25GCALLUSERDATA(r3, 0x89e4, &(0x7f0000000240)={0x64, "d2004f89a15f2cf19098ed6cfbc2c4f5a163a3a532cbecbe3aff30f52d23dfbe5ef7cedb6b6be7d0cbcb6130f9edab07196a6477226039836736989c8b2c26f4fa1f1bd7203eec2c7ccea56f35cc29312d7471829a861177c5f61a42af1662c124ac0cd4de456ae94808de8b9a3c157d41fc2531a6de2e5febf8d934588f8dbc"}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) 19:23:35 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x83, &(0x7f0000000040), &(0x7f0000000140)=0x4) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000180), 0x4) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x7, 0x20}, &(0x7f0000000300)=0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x10000, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000440)={r3, 0x7f}, 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r4, 0x1000000) sendfile(r2, r4, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r2) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000240)={0x0, @reserved}) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) [ 486.023548][T18966] binder_transaction: 9 callbacks suppressed [ 486.023563][T18966] binder: 18965:18966 transaction failed 29189/-22, size 24-0 line 2903 19:23:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 486.078351][T18966] binder: 18965:18966 ioctl c0306201 20000440 returned -14 [ 486.093548][T18966] binder: 18965:18966 transaction failed 29189/-22, size 24-0 line 2903 [ 486.102569][T18966] binder: 18965:18966 ioctl c0306201 20000440 returned -14 [ 486.121876][T18982] device eql entered promiscuous mode 19:23:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa00000000000000, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 486.200027][T18986] binder: 18985:18986 transaction failed 29189/-22, size 24-0 line 2903 [ 486.223650][T18986] binder: 18985:18986 ioctl c0306201 20000440 returned -14 19:23:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x1200000000000000, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 486.327335][T18990] binder: 18989:18990 transaction failed 29189/-22, size 24-0 line 2903 [ 486.345907][T18990] binder: 18989:18990 ioctl c0306201 20000440 returned -14 [ 486.455207][T18994] binder: 18993:18994 transaction failed 29189/-22, size 24-0 line 2903 [ 486.482336][T18994] binder: 18993:18994 ioctl c0306201 20000440 returned -14 19:23:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x4800000000000000, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:36 executing program 4: mlockall(0x8000000000000001) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x240, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0385720, &(0x7f0000000080)={0x1, {0x0, 0x1c9c380}, 0x550b, 0x7083cffb}) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040)) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) fcntl$getown(0xffffffffffffffff, 0x9) fcntl$getown(0xffffffffffffff9c, 0x9) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000100)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000340), &(0x7f0000000380)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x14, &(0x7f0000000200)=':wlan1GPLmd5sumproc\x00'}, 0x30) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000280)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000002c0)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000300)='oom_score_adj\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000180)={0x3, 0x0, 0x10001, 0x4de9, 0x3, 0x2e}) sendfile(r2, r3, 0x0, 0x1) 19:23:36 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x4000) shmdt(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) [ 486.620521][T18998] binder: 18996:18998 transaction failed 29189/-22, size 24-0 line 2903 [ 486.634025][T18998] binder: 18996:18998 ioctl c0306201 20000440 returned -14 [ 486.744830][T19005] device eql entered promiscuous mode 19:23:39 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 19:23:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x4c00000000000000, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x940}], 0x2}}], 0x1, 0x0, 0x0) 19:23:39 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x101000, 0x0) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f00000012c0)={0x1, 0x0, 0x2080, {0x100000, 0x0, 0x3}, [], "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", "f60e3e89545b0c660d16ed57648e533094c9badb81b9fd110a273b97c0026c0e7c6d453fcfc95e72f63d13d9484f07fb21d1fd7734fd185b3ee929b94b7d326c97b46b27a1aadd89ff340ad9d00ddcc472c81e95f64441adab88ca4f654bb2bea112f6e9716f25d5c8aa7c63ecc8520632af75a5b5ba9a77137b12d5fe508f5542f8e19e9222779754e5c4516cfa8dbdade0f41c7b8bb05884493b4a75197285c9c0b05f78c26867de6b9f44264652fa988cc5956aa830979ab3b222365407393f0fc06522b535430e7a1706b6aa96e8503f2cae52620044385ddd9186e88e190c69f738ddb75c87f41e15d367955c757ba31f3561823298098da1b87e45d3435369b514668cfd81e106dc2780f0d8abf1fa8933aa438d1b58b028b2d9961eef44091def6f358b4cdc69684f8aeabd7a11b479d8a59b61018aa30c9880d3dcb5fcbd74ded5fdac65e19d6f70ac526e2598cf3e928d40d97ea799f7ef0882ecd6f6ad6777775cc4b8e196a5a00cf0f4c83569d026776d648a6b81e9f3bc059dd10fd69f875b76a037171ce82f401f46d27971846b4fe653e81e11e2535b2b07fbf6a33384a9a89a3ede01cc46297959eeccdafcc603082915342a79813da439bcc444dc1ff82341c332027d761d1f42506e9cbc270acb7a7fee34ba76f349c2d520e76d14a396ebcbe9feea429a60da3621ca95a55615afcf31157fb8b800fe844fb67e18d1827b56b710a1b2ba9bb5832a885c7b3d91a03acadd7b0a1d67b436f5aa4d7adbdf620885753e780d3ea12beff581f474abf9dda0c4b46325f9ba4e724800bfacee63b4320f25cdced8fb2373f9ae8d595948236abf81a3691e416434d65893ee99a7e79495f15c7e5bb280a0b088e831756dcfdf1c2d66a379ff71367ba9a0f0d5e05bc87e5a3142c301bea20c4ed48574d1de2041d633ac738cde86e49925152c6f531c28ebb26038ef7ac3153929c9eb5645c6a8513291dc37fb00c3c46d3528ddf1bfb08d654a8fab6c6b3ae991da939a553e45d87cc7ad7484494f3b4f498262ce65b285267180066fb61403e8a054ef6f1424495f5c0de5a4f6d22a0d68bf7c8d3bd05aa6ff0bfa9611144be9c0021916096a32d807c2d5f593eaed7f3073d4aeb4e1e432b5b350047522589fdddb239b656307c4619c57ad95e72d5facd132eefcb5981bf9816e35f2917e6241df876d42d4c7a413a11b4f8d290e141957db2a2946e6019442c9335fbd0a03d67cb50097bd47caf29c4bf789bda0f71dbcc24a38486bb75160f31125af544e3c51d76bfed517db051e79fe7b17ea23d231d9b27c90b182861b9924adc5772666efab17ed1318f4354d0ee6272a8db1868da337dc6c495d2286a56d65d1ea3cdb9ab34873a9a3496ae761ba420bc145077bcab2712774199b0d7fedf6cdbb8a359d6a80e04706e151797bfd13e999ad903a92cd71e16b72d9b5fbb27ff2982e1691d4b0b8b452974b38c7bfdaee34440c02c54b1987e150f74a1343914f11f84aaaf2c2e36e57d77c788971ebe337fb36c8a70c9a4fa6a1253cd279782a8d84745ba164047c6e501bf706beec71a950e5bd363f7de386823fc92546d8e9a54ba5b991a508a55104694879bfddac38e6e239843b75d535540993c73bed0bb214a2179a630fedab90b10baf6559266e003d9f06097a24a2e5b30142ecf72aa4447c1b554472fd331ba0c87fcefb065865c00ed63facde6f964fe8cdaf97b013be26f45d83530ad3edd721f8dce90e72da11bbf67bc7cedae60c6ba604c790e046b9d95aeaf3475b218d27ec06d18ff3d1b7a5f187a9cbfa671941f33f124c136298e7805976c213fd4f11b1fc764360ce57f383946145199c27f6a433f9c47f0ed7a7570491f203a8fd6bcf5c93cd9e5b7aac7958756895c95882e74085efcbd7502638bc31e3af02ae0be0c84ba338f543f1e9dc345e226d5c168d18d2385a6a52fed33fa9b0bb8e4414beb830c569d5be7a684587ecd806b7b94ceee1354c15c206d4ea9f7c9a97f060415c221b6a5ee6d5069618a808a4122041a1f6d789afe0c50c49dd42c8b687cf50cf16063ebe9b57467f8a58fec75d6afbdf8b050a2fe2750e6dfcf3a962339bdf576c37a8317ae93e96ccbec2244dca321d8c3d5dae2ce826f451dfa9df058669221bb2b4b378938cd67ba5cae13c264c9acc48b659c062bcde9bc1bf2fb428281a699ffd9af03c1e5cc5c0203684f57f16ce607f3b690a3cf73d058f848488b1e73fbb09878aa159c92b050c9eb67d59c6294e57d4f8e42d59a07b4ae742d37ffb2a1e9d5c11e3f4a99e9d5688b8aabd5fbbe4d14e8717a2a19087f66da623d66706067c666c174aedc68a01b3d95757500742beb380b13c4bb3dfc3547e412a38d1183182de69136e39461ec0d3c2daba87af9fdfba87390b1287f9249c18de2d12a0276e6c16048a2d64c4077fac1529b9bb52e4782dfd4e24dc5c6810d629d88cc4eced6866b184433248b2f6fad6cc631f4c4b48144c4e83784f732ffc2f8c44fa3e9a4d33f2a118f3c45ce04773614cc0f630ceced7fed4aec06aa9bcf547a125ae776796a269bd0b580f1781d7c0cb7d5d248e4dc0716799adf7587cd16825403b91f65f8604c517eb9cf02a8c78771f02c360e48c4d11862699c6a2842a551c1f0f7ae96cd6249ae26328351292483e813643923c6a6cb29aa59969a633a31bb329420bab03e7a9241d644a56d02c8515540ec41cdbe0ca33fe1ea8b4ea1da69d3860f90ab2b448a81bd76681b0289df082a916264552e948cdcbb38b265dbfa5e2d1a3636e6935f4553a2930b0666c0a796d4056ae3be9f3091b3d6445ef2291105ee072843afde314225cc50b0ed8daaef33d505001dec938133857f9e8ce7d33214fab65f68b1c6194719e2663cdaa1f605a7cd0e3e0a94c2b311689688a7e9188144d6257d2761ed5a49b814cab5490ec76049f5d676e8baaf7d944f873aed80ecde38c3029bdfbc28a9a5da682ee677a1d54d7e36ff7f0225a4da82b2cd27b56ecbb08f2db6863c0123d50730c76df7237c80798e3ca968c51507c3246d8717362ef022b8de81f9b1880749423571c337e02e909762ea8a61631958c350ca0f6688d47e1ec69e97b776ede39747b961d8d52aa2dfe2feaef5762abcfc5fa02659dc0c4e2a87101778913470a2f0e2dfa7345f4f65fa39b78119137b7e2d37691b72e1d393c9ccc61738d6c88add612c29b2c2663fe5262554d949723405bb81807ac8a961f9e9dfbedf2dfa887ad37ba5b5abdecefafb879729fb1c68b3b173664e5a935a8e829f8415acf45ba6ff7be8562723fb43b86f4fe7d27453999bdf79efa47d1a51a648581c43c6345bef7ed5a1b66047f9dedf8f117de58e41d3c9b6dbe6dcba8ccd83895bb9968215ca1492eeb8fb7b346111fb55ade762283de7614a08612f0f2e11864121bfa906b66bf33d3569bd985409b6c81a5b4cfb54d7cba82c801f5131ed3328fa9b58ef86d8583b59ece08862f8c00a2c4fa5884f580896477440f62582002eaaae951fb3d94a1082c767d4e0b6b1dbdb762be585039a5772c9e1a7d08e5cfe1bdbdcd37e23bad930fe76c3bba75155daa1325e5360ccc4de06f0b1a2ac9d6fdbc3414c204cf3e4cfe73dfec69508713509f4e697fdb1ec9c4f3e144eae2aa23051ed005a8588c13209228b203665d8649f2d7cbced831099d6f22c85de3ba098c001fe78cfb48eefb259bde2d9ddd7aac0ae078df4698bf11f221e0315e96177aab03047d97173da24e75f4f7094e1f2424e7b3e5b6969042622dd11bb6ba36a68acab270547ab3feed817b9cd9f1a80a8ea8687933a3c0038058d447cb35c92728a337306bd1926537f8e6357820dbbad5880a4f5a408ba879376b4742c95016d17138f62c4891fc5a0fa6eeaa707f1cf0c1c26ea083a333ba5e9ce924eb9251dbbadb8ccf3b8f81a3ccc2231e17656df2ca6d2e4ac8f575fb5056b732e4f3971f8ebc02c45f767bde9ff509822b82cd822e1627a18f022fa7e5e164f364ce1e80ad7c63f22012c024967cbdfb73e2dae8f147966087aa4c5d2ef51377f4ca0ff6c8ea8d6a04586d9cc2841daa78512dcc5bd80094a8d2851bc438da1b90bd2333b818323aa156ac00a1da5aa3fd47de06e71a3ae17cc1724a369eed39641e65df93df726a1908cff69db4c51a34e27ce02388aa0e4fc285a307e5011e9d2d0b4f4d9f55d44e09c5831d46cd38e214220c45e0d29d2a3e5e0d03d01ecb34ba44db3229537d45d0425bc0498bfd9ca8c638544faf0bcdcfa4ec4cf1be53bc8c79ac5b2882a273da3e0d3f9f3855a69147209108574751049076b6ea9656adc11afceb37f2b10067c47d8280e2b7d4a9eeefa4833c8c28d6bb8a41f8150c6cd56b1e7d6caac9aabc79acf5f14c82b01c31dcd8feb5096a4cb0daa19e628cdd319fa71fd48244f49691b898e96b29d59fdd35dcfff65ab7e4c778b6ed4df4a83585418f60a73ee0a74664082d89612fe15c719d37f3510465498d458bbc04c60366ae0b9073c7f49d549bfc3a054bc0ae103caa62b7a374b678f2befa977f24c0e29cc8b084f2fd4be821823583de984a38ecc72de6ee9460fce7634ea463505dc02511c277e9dbcc8dd402fbda6dea58de2b8f18e0ea0e8733702cdbff4634433291ebc5a429bfcbbd2567e9caaffbc71a2115d55c2563775a97e2866b6d1fcdb9ea57c17329dab73c885ceb62b6316796a3063b91323ca9e1fbe9cac3ac07ea7a5f289aaf851d2430ca3130a3868b88c62de1ec0c2e6cde76d748de15381401f7ebb765cdf198ebef7d9dc5bd79f14a2369154d1f4b3a6992e20e4f1b501d6cbf6bf1dec355d133c3676ec06f797675b7b458b60237410f4e2c456c20ee2f4d6109ed002a1363c48ae00a028730e7a1eb58f5a2f1fa7140fa839110b1fa15cfa5d92638ccbcfce1533b76dca510d1528d3e74c8442cc58266ac595c50139bbb7df005fa67874440619ec1bdf2a2ab2e63a73f4ba4f4ab4d16c373ef343e8b4f37720b0183f9f3dd7dd024f2f53428b023551a95d3f3ec446ec50b680768dd071668c16aa9ab2f28fa77ddafbf4d8241dafeca295e9d6838c53f597ab796707543c9cd5ab8d6037f05a14474c76054ce23cfafd7a57c54c1107dbcef835f1204352256638e8008abebb6778134bcca5b2288f30fac1ff52862a667331b6a3a0c460fa107ff1fb2ffe71462f007f0f90c5c63ef2d6aec2c8cbe055f84ccdb4ee29335210280acf4babc441d92eed10a612a3908a20a9560149f2b7f6c8e646186490a2c78e7e69003f9936cfc39869af20481d81d9384a1c35a0928c4d04d4556941c9e1c0725d40be76edae3be80f4f82d1a28f84b6ced8ecea62a7ec2b9a511dd6e38b3129992ffe913fe793af4ec9c8ce2d4c2a5f7b06bd03ccbbc721af50b4deb069e87d13fd466f1fa8e47a0b215f3de95a7583d0b2b105ec682130fab4266ebc14213396af50dc73b34e8a1ef4fa1d3e1ad44c65e36ef327d44bafca3875f0e945301654711e67867869f7f272d264af7b288f1f86243cd3ce2ef53898346794a673886d631b1be92caea4dd2d1af4d4a333a3bc994fbd0df259d0edb746c84fe9eb388105c57ef35020a5864151074212e31ed8a6b92052233cb03d2024ce29ed594a28050913cf03ce680af85f05e584bc3215022e507e3884c57f3595ef5609c7364b7642bc8ca973d47c2fc0becd3a154493422382ddbfbd1edcd55011a1b520caf31776ed8a8b1afa95b9069"}) socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000140)={r3, 0x2}) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:23:39 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x202, 0x0) sendfile(r0, r1, 0x0, 0x1) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)) getpgid(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r1, 0x0, 0x7, &(0x7f0000000140)='^*self\x00'}, 0x30) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000240)=0x0) r4 = getpgrp(r3) mq_notify(r0, &(0x7f0000000040)={0x0, 0x36, 0x2, @tid=r4}) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000080)='syz1\x00') 19:23:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x100, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x1, 0x2) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000001c0)={0x4, r4, 0x1}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) [ 489.088989][T19019] binder: 19013:19019 transaction failed 29189/-22, size 24-0 line 2903 19:23:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x6800000000000000, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 489.141084][T19019] binder: 19013:19019 ioctl c0306201 20000440 returned -14 19:23:39 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 489.214134][T19031] device eql entered promiscuous mode [ 489.236706][T19033] binder: 19029:19033 transaction failed 29189/-22, size 24-0 line 2903 19:23:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x6c00000000000000, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 489.251274][T19033] binder: 19029:19033 ioctl c0306201 20000440 returned -14 19:23:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x7400000000000000, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 489.348171][T19041] binder: 19040:19041 transaction failed 29189/-22, size 24-0 line 2903 [ 489.369206][T19041] binder: 19040:19041 ioctl c0306201 20000440 returned -14 19:23:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x7a00000000000000, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 489.476586][T19045] binder: 19044:19045 transaction failed 29189/-22, size 24-0 line 2903 [ 489.496599][T19045] binder: 19044:19045 ioctl c0306201 20000440 returned -14 [ 489.595687][T19049] binder: 19048:19049 ioctl c0306201 20000440 returned -14 [ 489.615069][T19049] binder: 19048:19049 ioctl c0306201 20000440 returned -14 19:23:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:39 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000080)={0xbe, 0x80000000, 0xfffffffffffffffe, 'queue1\x00', 0x200}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r2, 0x0, 0x1) 19:23:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 489.771685][T19053] binder: 19052:19053 ioctl c0306201 20000440 returned -14 [ 489.875483][T19058] binder: 19057:19058 ioctl c0306201 20000440 returned -14 19:23:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0xfcb}], 0x2}}], 0x1, 0x0, 0x0) 19:23:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x4, 0x400) connect$vsock_dgram(r1, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @host}, 0x10) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f00000002c0)={{0x4, @addr=0x6}, "ebf051d59b19b88080ee9ac6e0fefa49adb439ebc83abc117d4512aaa1531f20", 0x2}) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x4, @local, 0x81}, r4}}, 0x30) preadv(r3, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r2, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) 19:23:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:39 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0xa8, &(0x7f0000000180)={[{@index_on='index=on'}, {@nfs_export_off='nfs_export=off'}, {@xino_auto='xino=auto'}], [{@dont_measure='dont_measure'}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@appraise='appraise'}]}) close(r0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000240)='/dev/video#\x00', 0x3, 0x2) 19:23:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 490.032627][T19069] binder: 19065:19069 ioctl c0306201 20000440 returned -14 [ 490.090906][T19076] binder: 19075:19076 ioctl c0306201 20000440 returned -14 [ 490.106934][T19078] device eql entered promiscuous mode 19:23:42 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 19:23:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:42 executing program 4: mlockall(0x1) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x1) 19:23:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) prctl$PR_SET_SECCOMP(0x16, 0x3, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x9, 0x4, 0x5, 0x7fff}]}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) 19:23:42 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000140)=0xffffff99) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:23:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1002}], 0x2}}], 0x1, 0x0, 0x0) [ 492.292024][T19093] binder_transaction: 6 callbacks suppressed [ 492.292040][T19093] binder: 19090:19093 transaction failed 29189/-22, size 24-0 line 2903 19:23:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 492.341685][T19093] binder: 19090:19093 ioctl c0306201 20000440 returned -14 [ 492.400855][T19105] device eql entered promiscuous mode [ 492.446126][T19110] binder: 19109:19110 transaction failed 29189/-22, size 24-0 line 2903 [ 492.484969][T19110] binder: 19109:19110 ioctl c0306201 20000440 returned -14 19:23:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 492.626519][T19114] binder: 19112:19114 transaction failed 29189/-22, size 24-0 line 2903 [ 492.635104][T19114] binder: 19112:19114 ioctl c0306201 20000440 returned -14 19:23:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 492.772888][T19117] binder: 19116:19117 transaction failed 29189/-22, size 24-0 line 2903 [ 492.803559][T19117] binder: 19116:19117 ioctl c0306201 20000440 returned -14 19:23:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:42 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000080)={0x53, 0x7ff, 0x1, {0x38cf, 0x400}, {0x0, 0x4}, @cond=[{0x3f, 0x7f, 0xbb5, 0x1, 0x6, 0x1}, {0xffffffffffffffff, 0x8000, 0x6, 0x5, 0x1, 0x5}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0x7) sendfile(r0, r1, 0x0, 0x1) 19:23:42 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x800, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000300)={0x8000, 0x100000001}, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000340)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f00000003c0)={r4, &(0x7f0000000380)}) connect$packet(r0, &(0x7f0000000440)={0x11, 0xc, r3, 0x1, 0x4, 0x6, @dev={[], 0xa}}, 0x14) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'~q\x00\x00\x00\xf4\x00\x80\x00\x00\x00\x00\x00\x00\x80\x04', 0x200000000005002}) r6 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x100000000, 0x8080) ioctl$KVM_ASSIGN_DEV_IRQ(r6, 0x4040ae70, &(0x7f00000001c0)={0x3, 0x100000001, 0x20, 0x204}) ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000000280)={'rose0\x00', {0x2, 0x4e21, @rand_addr=0x8}}) preadv(r5, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) r7 = getpgrp(0x0) ioprio_get$pid(0x2, r7) syz_open_procfs(r7, &(0x7f0000000080)='net/if_inet6\x00') ioctl$sock_ifreq(r2, 0x89ff, &(0x7f0000000040)={'teql0\x00', @ifru_hwaddr=@broadcast}) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mISDNtimer\x00', 0x80000, 0x0) [ 492.965993][T19124] binder: 19120:19124 transaction failed 29189/-22, size 24-0 line 2903 [ 493.008949][T19124] binder: 19120:19124 ioctl c0306201 20000440 returned -14 19:23:45 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 19:23:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1008}], 0x2}}], 0x1, 0x0, 0x0) 19:23:45 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x20000000000000, 0x1, 0x8, 0xf7da, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r2, 0x4}, &(0x7f00000001c0)=0x8) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:23:45 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040)=0x1000800, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/raw\x00') sendfile(r0, r1, 0x0, 0x1) 19:23:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = accept(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, &(0x7f0000000040)=0x80) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) r2 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x2, 0x25ac00) ioctl$KVM_SMI(r2, 0xaeb7) ioctl(r0, 0x1000009913, &(0x7f0000000180)="0a00010000000000000000") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000001c0)={'lo\x00', 0x81fa}) preadv(r4, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r3, 0x80008914, &(0x7f0000000140)={'bond0\x00', @ifru_data=&(0x7f0000000080)="5b3926dc85e9ec221629ca82c13db381d2be6cbc5d67685504e34b8e455d46da"}) 19:23:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 495.361205][T19150] binder: 19144:19150 transaction failed 29189/-22, size 24-0 line 2903 [ 495.394708][T19150] binder: 19144:19150 ioctl c0306201 20000440 returned -14 19:23:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000100000890e, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) [ 495.505932][T19165] binder: 19164:19165 transaction failed 29189/-22, size 24-0 line 2903 [ 495.536826][T19165] binder: 19164:19165 ioctl c0306201 20000440 returned -14 19:23:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 495.602384][T19170] device eql entered promiscuous mode [ 495.656128][T19172] binder: 19171:19172 transaction failed 29189/-22, size 24-0 line 2903 [ 495.673979][T19172] binder: 19171:19172 ioctl c0306201 20000440 returned -14 19:23:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x74, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 495.805526][T19176] binder: 19175:19176 transaction failed 29189/-22, size 24-0 line 2903 [ 495.825473][T19176] binder: 19175:19176 ioctl c0306201 20000440 returned -14 19:23:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 495.964655][T19179] binder: 19178:19179 transaction failed 29189/-22, size 24-0 line 2903 [ 495.975301][T19179] binder: 19178:19179 ioctl c0306201 20000440 returned -14 [ 495.985395][T19179] binder: 19178:19179 ioctl c0306201 20000440 returned -14 [ 496.075931][T19183] binder: 19182:19183 ioctl c0306201 20000440 returned -14 19:23:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x101000, 0x0) write$FUSE_LSEEK(r1, &(0x7f0000000140)={0x18, 0xffffffffffffffda, 0x3, {0x7}}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r3, &(0x7f0000000040)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r2, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) 19:23:48 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x1f, r0, 0x0, 0x0) 19:23:48 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', r1}, 0x10) sendfile(r0, r1, 0x0, 0x2) 19:23:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1010}], 0x2}}], 0x1, 0x0, 0x0) 19:23:48 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') r5 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x1, 0x0) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000540), &(0x7f0000000580)=0x8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x80, 0x0) r7 = fcntl$dupfd(r1, 0x0, r2) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r4, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, [{0x8, 0x1, r2}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x4005) r8 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r8, 0x80404506, &(0x7f0000000340)=""/237) ioctl$DRM_IOCTL_AGP_RELEASE(r8, 0x6431) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000040)=0x313) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r9 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) sendfile(r8, r9, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) ioctl$VIDIOC_S_FREQUENCY(r8, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) bind$alg(0xffffffffffffffff, 0x0, 0x0) [ 498.453613][T19199] binder_transaction: 2 callbacks suppressed [ 498.453630][T19199] binder: 19193:19199 transaction failed 29189/-22, size 24-0 line 2903 [ 498.471482][T19199] binder: 19193:19199 ioctl c0306201 20000440 returned -14 19:23:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:48 executing program 1: socket$inet6(0xa, 0x5, 0x3) r0 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x5, 0x20000) setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f00000001c0)=0x9, 0x4) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000140)={0x0, 0x100000001, 0x100, &(0x7f0000000040)=0x2}) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) [ 498.548433][T19196] device eql entered promiscuous mode [ 498.659875][T19214] binder: 19209:19214 transaction failed 29189/-22, size 24-0 line 2903 [ 498.675680][T19214] binder: 19209:19214 ioctl c0306201 20000440 returned -14 19:23:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 498.860353][T19222] binder: 19221:19222 transaction failed 29189/-22, size 24-0 line 2903 [ 498.885931][T19222] binder: 19221:19222 ioctl c0306201 20000440 returned -14 19:23:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:49 executing program 4: mlockall(0x8000000000000002) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x80000001, 0x200000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x1) 19:23:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 499.025969][T19225] binder: 19224:19225 transaction failed 29189/-22, size 24-0 line 2903 [ 499.051036][T19225] binder: 19224:19225 ioctl c0306201 20000440 returned -14 19:23:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) r2 = gettid() r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x2000, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f00000001c0)={r3, r0, 0x8}) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r5, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r4, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_addrs=@nfc={0x27, 0x0, 0x2, 0x7}}) [ 499.163983][T19233] binder: 19232:19233 transaction failed 29189/-22, size 24-0 line 2903 [ 499.174369][T19233] binder: 19232:19233 ioctl c0306201 20000440 returned -14 19:23:51 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x1f, r0, 0x0, 0x0) 19:23:51 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') mlockall(0x6) syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r0, 0x0, 0x3) 19:23:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x10f5}], 0x2}}], 0x1, 0x0, 0x0) 19:23:51 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000140)={0x8, "08166e95f955bacfd4bbecd75399fc4864a08d57efd8a13acb525b2040d8b496", 0x1, 0x2, 0x4, 0xffffff, 0x2000001, 0x4}) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:23:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x20000000004, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) 19:23:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x4c00, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 501.534128][T19253] binder: 19252:19253 transaction failed 29189/-22, size 24-0 line 2903 [ 501.565557][T19253] binder: 19252:19253 ioctl c0306201 20000440 returned -14 19:23:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x6800, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 501.660390][T19266] binder: 19265:19266 transaction failed 29189/-22, size 24-0 line 2903 [ 501.669013][T19266] binder: 19265:19266 ioctl c0306201 20000440 returned -14 19:23:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x6c00, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 501.735077][T19270] binder: 19269:19270 transaction failed 29189/-22, size 24-0 line 2903 [ 501.743731][T19270] binder: 19269:19270 ioctl c0306201 20000440 returned -14 19:23:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x7400, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 501.813232][T19274] binder: 19272:19274 transaction failed 29189/-22, size 24-0 line 2903 [ 501.822102][T19274] binder: 19272:19274 ioctl c0306201 20000440 returned -14 19:23:51 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='coredump_filter\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r2, 0x0, 0x1) [ 501.902036][T19277] binder: 19276:19277 transaction failed 29189/-22, size 24-0 line 2903 [ 501.917256][T19277] binder: 19276:19277 ioctl c0306201 20000440 returned -14 19:23:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x7a00, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 502.018006][T19283] binder: 19282:19283 ioctl c0306201 20000440 returned -14 19:23:54 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x1f, r0, 0x0, 0x0) 19:23:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:54 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x40000000, 0x20200) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x78) arch_prctl$ARCH_SET_GS(0x1001, 0x9) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x1) 19:23:54 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(r0, 0x0, 0x25c) 19:23:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x20001000}], 0x2}}], 0x1, 0x0, 0x0) 19:23:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x0, 0xc0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000000), 0x4) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f00000003c0)=0x7ff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x20, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8008}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0x2, 0x70bd28, 0x25dfdbfc, {0x2, 0xb4, 0x10, 0x10001, 0xfe, 0x3, 0xfd, 0x0, 0x800}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x41) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) ioctl(r0, 0x7fff, &(0x7f0000000040)="cbb3ff7d899d515c05c583f221f63826f602150185ebbf6bacd4368520af67222a495c0d9b46ca29677353751933b1145ceca332ec") preadv(r3, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r1, 0x891c, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) [ 504.617811][T19305] binder_transaction: 1 callbacks suppressed [ 504.617829][T19305] binder: 19296:19305 transaction failed 29189/-22, size 24-0 line 2903 [ 504.647320][T19305] binder: 19296:19305 ioctl c0306201 20000440 returned -14 19:23:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 504.666740][T19305] binder: 19296:19305 transaction failed 29189/-22, size 24-0 line 2903 [ 504.675734][T19305] binder: 19296:19305 ioctl c0306201 20000440 returned -14 [ 504.740579][T19315] binder: 19314:19315 transaction failed 29189/-22, size 24-0 line 2903 [ 504.756731][T19315] binder: 19314:19315 ioctl c0306201 20000440 returned -14 19:23:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:54 executing program 4: io_setup(0x7, &(0x7f0000000080)=0x0) io_getevents(r0, 0x3, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x10200, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r2, 0x0, 0x1) [ 504.874094][T19320] binder: 19319:19320 transaction failed 29189/-22, size 24-0 line 2903 [ 504.891521][T19320] binder: 19319:19320 ioctl c0306201 20000440 returned -14 19:23:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 505.002075][T19326] binder: 19325:19326 transaction failed 29189/-22, size 24-0 line 2903 [ 505.011085][T19326] binder: 19325:19326 ioctl c0306201 20000440 returned -14 19:23:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 505.091142][T19329] binder: 19328:19329 transaction failed 29189/-22, size 24-0 line 2903 [ 505.099881][T19329] binder: 19328:19329 ioctl c0306201 20000440 returned -14 [ 505.184992][T19333] binder: 19331:19333 transaction failed 29189/-22, size 24-0 line 2903 [ 505.200341][T19333] binder: 19331:19333 ioctl c0306201 20000440 returned -14 19:23:57 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 19:23:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:57 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/packet\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') socket$netlink(0x10, 0x3, 0x9) sendfile(r0, r1, 0x0, 0x1) 19:23:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x200017c0}], 0x2}}], 0x1, 0x0, 0x0) 19:23:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x2, 0xffffffffffffffff) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) 19:23:57 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000040), &(0x7f0000000140)=0x4) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) ioctl(r2, 0x20, &(0x7f0000000240)="1c210b6bd29873f528beab5cd5acfc6e5ac84f49ea9da186a88b766aef4f4d1b1cb295db776b11bde2d1236e447bc02526fee250f156b7b241b64cb31af0207ab18afabec7e06b99d07618bc9a77fec1591ce63edd9ab6117eaccb92672c88dbd124b51c8f8db9ebe3cfdd4f02405d4dbdf488d654feea306007de9cbad65c4359f0744c71d9a1a4030a5ad94ed5a07be07a202d9368dccc79d4db944bb34f7ea0d04b43bb2bb2694c4c853b9799b5d3edf20a177924efe23e73e30351ef1b496edbd55bd83fd3dbc6d87c089529e728ba234f48917ce7618c686a966b378769f0bb11b972f7d03b875c4555ac763163149e7b86f0") ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f00000001c0)={0xc81, 0x3, 0x81}) r3 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x8000) sendfile(r2, r3, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r3) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000180)={0xb3, 0x7, 0x698000000000000}) 19:23:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 507.674338][T19352] binder: 19346:19352 transaction failed 29189/-22, size 24-0 line 2903 [ 507.706949][T19352] binder: 19346:19352 ioctl c0306201 20000440 returned -14 19:23:57 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 19:23:57 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0xfffffffffffffe05) [ 507.778746][T19362] device eql entered promiscuous mode 19:23:57 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) [ 507.855129][T19366] binder: 19361:19366 transaction failed 29189/-22, size 24-0 line 2903 [ 507.892403][T19366] binder: 19361:19366 ioctl c0306201 20000440 returned -14 19:23:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x12000000, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 508.051893][T19379] binder: 19378:19379 transaction failed 29189/-22, size 24-0 line 2903 [ 508.093571][T19379] binder: 19378:19379 ioctl c0306201 20000440 returned -14 19:23:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 508.252972][T19383] binder: 19382:19383 ioctl c0306201 20000440 returned -14 19:23:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x4c000000, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) r3 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x6, 0x80000) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0xae44, 0x2fe) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) [ 508.361620][T19387] binder: 19386:19387 ioctl c0306201 20000440 returned -14 19:23:58 executing program 4: mlockall(0x4) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f00000000c0)=0xe8) r2 = getegid() write$FUSE_CREATE_OPEN(r0, &(0x7f00000002c0)={0xa0, 0xffffffffffffffda, 0x2, {{0x2, 0x2, 0x5, 0x6e22, 0x4, 0x4, {0x6, 0x6, 0x9f8, 0x1, 0x7, 0x800, 0x7, 0x2, 0x7fff, 0x6, 0x10000, r1, r2, 0x5, 0x8564}}, {0x0, 0x4}}}, 0xa0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000440)={0x2, 0x1}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r4, r0, 0x0, 0x3) ioctl$TIOCLINUX4(r4, 0x541c, &(0x7f0000000500)) r5 = getpid() accept4$netrom(r4, &(0x7f0000000380)={{0x3, @netrom}, [@remote, @rose, @rose, @bcast, @remote, @netrom, @bcast, @default]}, &(0x7f0000000140)=0x48, 0x800) ioctl$RTC_VL_READ(r3, 0x80047013, &(0x7f0000000400)) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000480)={@null, @null, @null, 0x7, 0x800, 0x0, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default]}) syz_open_procfs(r5, &(0x7f0000000040)='net/mcfilter\x00') 19:23:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x7fffef0b}], 0x2}}], 0x1, 0x0, 0x0) 19:23:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x68000000, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:23:58 executing program 4: mlockall(0x8000000000000001) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x20c80, 0x0) getsockname$netlink(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xc) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000100)=0x8, &(0x7f0000000140)=0x2) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r2, 0x0, 0x1) 19:23:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x6c000000, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 508.545769][T19399] device eql entered promiscuous mode [ 508.571316][T19401] binder: 19398:19401 ioctl c0306201 20000440 returned -14 19:23:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x74000000, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 508.706326][T19411] binder: 19410:19411 ioctl c0306201 20000440 returned -14 19:23:58 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x8, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1c}}, 0x7ff}}, 0xffffffff, 0x81, 0xfffffffffffffff8, 0x4, 0x2}, &(0x7f0000000040)=0x98) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={r3, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x8001, 0x6}, 0x90) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) [ 508.839194][T19416] binder: 19414:19416 ioctl c0306201 20000440 returned -14 19:24:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000040), 0x4) recvmmsg(r2, &(0x7f0000007ac0)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000240)=""/104, 0x68}, 0x20}, {{&(0x7f00000002c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/198, 0xc6}, {&(0x7f0000000440)=""/193, 0xc1}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/108, 0x6c}], 0x4}, 0x1}, {{&(0x7f0000000700)=@rc, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000780)=""/21, 0x15}, {&(0x7f00000007c0)=""/83, 0x53}, {&(0x7f0000000840)=""/194, 0xc2}, {&(0x7f0000000940)=""/77, 0x4d}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000009c0)=""/87, 0x57}, {&(0x7f0000000a40)=""/242, 0xf2}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/148, 0x94}, {&(0x7f0000000c00)=""/25, 0x19}], 0xa}}, {{&(0x7f0000000d00)=@ethernet={0x0, @random}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000d80)=""/24, 0x18}, {&(0x7f0000000dc0)=""/24, 0x18}, {&(0x7f0000000e00)=""/204, 0xcc}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f0000000f00)=""/210, 0xd2}, {&(0x7f00000043c0)=""/4096, 0x1000}], 0x6, &(0x7f0000001080)=""/94, 0x5e}, 0x1000}, {{&(0x7f0000001100)=@rc, 0x80, &(0x7f0000001280)=[{&(0x7f0000001180)=""/196, 0xc4}], 0x1, &(0x7f00000053c0)=""/123, 0x7b}, 0x8}, {{&(0x7f0000005440)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000005540)=[{&(0x7f00000054c0)=""/101, 0x65}], 0x1}}, {{&(0x7f0000005580)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000005700)=[{&(0x7f0000005600)=""/30, 0x1e}, {&(0x7f0000005640)=""/152, 0x98}], 0x2}, 0x5}, {{&(0x7f0000005740)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f00000079c0)=[{&(0x7f00000057c0)=""/4096, 0x1000}, {&(0x7f00000067c0)=""/64, 0x40}, {&(0x7f0000006800)=""/13, 0xd}, {&(0x7f0000006840)=""/120, 0x78}, {&(0x7f00000068c0)=""/168, 0xa8}, {&(0x7f0000006980)=""/8, 0x8}, {&(0x7f00000069c0)=""/4096, 0x1000}], 0x7, &(0x7f0000007a40)=""/98, 0x62}, 0x8}], 0x8, 0x40010000, 0x0) ioctl$sock_ifreq(r0, 0x89bd, &(0x7f0000007cc0)={'bond_slave_0\x00', @ifru_addrs=@xdp={0x2c, 0x7, r4, 0xe}}) preadv(r3, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r2, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x6, 0x7, 0xde, 0x4, 0x6, 0x7, 0xe}) 19:24:00 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:24:00 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/hci\x00') sendfile(r0, r1, 0x0, 0x1) 19:24:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x8}}], 0x1, 0x0, 0x0) 19:24:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x7a000000, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:00 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, 0x0, 0x0, 0x0) [ 511.026550][T19443] binder_transaction: 5 callbacks suppressed [ 511.026566][T19443] binder: 19437:19443 transaction failed 29189/-22, size 24-0 line 2903 [ 511.062085][T19443] binder: 19437:19443 ioctl c0306201 20000440 returned -14 19:24:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 511.175788][T19452] binder: 19451:19452 transaction failed 29189/-22, size 24-0 line 2903 [ 511.184918][T19453] device eql entered promiscuous mode [ 511.199160][T19452] binder: 19451:19452 ioctl c0306201 20000440 returned -14 19:24:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 511.266139][T19457] binder: 19456:19457 transaction failed 29189/-22, size 24-0 line 2903 [ 511.274913][T19457] binder: 19456:19457 ioctl c0306201 20000440 returned -14 19:24:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 511.342600][T19461] binder: 19460:19461 transaction failed 29189/-22, size 24-0 line 2903 [ 511.351401][T19461] binder: 19460:19461 ioctl c0306201 20000440 returned -14 [ 511.359928][T19461] binder: 19460:19461 transaction failed 29189/-22, size 24-0 line 2903 [ 511.368849][T19461] binder: 19460:19461 ioctl c0306201 20000440 returned -14 19:24:01 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2000, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000240)={r1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}, 0xc) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r2, r3, 0x0, 0x1) 19:24:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 511.482298][T19466] binder: 19465:19466 transaction failed 29189/-22, size 24-0 line 2903 [ 511.496199][T19466] binder: 19465:19466 ioctl c0306201 20000440 returned -14 [ 511.609235][T19470] binder: 19469:19470 transaction failed 29189/-22, size 24-0 line 2903 [ 511.624513][T19470] binder: 19469:19470 ioctl c0306201 20000440 returned -14 19:24:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000040)={@loopback, @loopback}, 0x8) [ 512.164446][T19483] device eql entered promiscuous mode 19:24:03 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x10000, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000080)={'ah\x00'}, &(0x7f00000000c0)=0x1e) mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r2, 0x0, 0x1) getrandom(&(0x7f00000001c0)=""/254, 0xfe, 0x1) 19:24:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:03 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, 0x0, 0x0, 0x0) 19:24:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0xff01}}], 0x1, 0x0, 0x0) 19:24:03 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) socket$l2tp(0x18, 0x1, 0x1) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000240)='\x84\xbf\x1c\xe6\x03\x8a3\xa7n\xc0b10\xf7\xe7\xfb\x81\xa4\xc4\x97\x84Gb\xec-op\xcd\xa2DM\xd7\x9a\xefZU\xf8\f\x02\x9f\x80\xabv\xc8;o\xb5Q\xa9\x04,\x89\xa58oSu\x84\x10\x9e\x8f\x920\x90\xad]\t\a\fg\xb3V\t(R\x93\xb8\xde', 0x80000000000004) ftruncate(r1, 0x1000000) ioctl$KIOCSOUND(r0, 0x4b2f, 0x1) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x516, &(0x7f0000000040)={0x4}, 0x8) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:24:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005000}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) syz_mount_image$bfs(&(0x7f0000000040)='bfs\x00', &(0x7f0000000140)='./file0\x00', 0x8d05, 0x6, &(0x7f0000000680)=[{&(0x7f0000000240)="6fc2e7177a643cbf1b2979d8b585aebfe6f883011f3c76d06f4d563b93a3d9af178973bec9a143f0835b276ae96a37c75c02ccb38185be4c03f503afa86b6aae06f7bf983236dfbdc733992ebbf0d6523b8c0cc984d9f0372cca7ba8f47d24904c69f1b62a2b53ce1d2292c973b2223b9c22fa06365d28f3dc5f07e53b66a17c235643625a8b8bb424b074f88f1f847f2d9dd8abac6383c4ea9c18374117233258bf1cd63af569b81bfd2c47fbbc0d5cbb2301a31966d12895046b", 0xbb, 0x100}, {&(0x7f0000000300)="d491583cc7728cbc65ee92da1ce25f9cecb4ec0a23f617fe8f0080a03df10cf6092e773ede7406b81864e26e16f5824370cf526a4200e8d3a8aaed87e0a716caf207579e25efbc2f1b0b8b5c95fad74e01561f83156a907e2bcf683cfefa7ead82bf0a485bac230e2b03f7e40ac7a5978fcd2eec9bc3f20910e83e59c2", 0x7d, 0xffffffff00000001}, {&(0x7f0000000380)="8248e3465c59eb7db58fa2536563cf7ca891260c22b5aeeccbea1e42e8381734cabb9d141c0d6d5441c4aef1865edfd18ebcaffb8fae376fb03779605f8f0dc6a8fa93a4f5858f183aeea7d209888570ccaece128ee5991cbd3f58f09c2afa3cf9714bbb7ad6", 0x66, 0x6}, {&(0x7f0000000400)="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", 0xfe, 0x4}, {&(0x7f0000000500)="95db08e4c8042916add56620628326f72d5b25c9bde7293d9e23fe15882e2b2f7e98e35e444ae0b16d2e390b3d831125ea607ca732aeaaf4bfd66220abc0e50530d5906482230b444eaf90b08817f75b3f4acda82429323b3e2843beca6582ccec9567ded36b7b5f9b926e72ceae5de71c140eadcc94", 0x76, 0x2}, {&(0x7f0000000580)="8c3f302b152a52d6b803f2bbee1282a6beb2c5ccb5d39c7f442f5b3632870ef334dfe5ee9ab45ec474dc15d1d8ea390bf10d4b596c34b0f68f034e3a4f77da1f5bd402977ce4ed99e632cb13a94a5f589c7fcc657856f34b19baec11f43a38d59059a4374d386959d88648b6427c8cbb1504515ac29b9569fab8edc533c86abaca4553c9a7d6fc07bd4dbfda18c8349b705ece8ab2e9753909c8d808343445f2f040d5f3bc0a5d396d1ea29efdb30bdb3029bed3731d73767f38878477b6be7c0932df38784616c4f0ed03e55c005d5ca43231c1", 0xd4, 0x7d7}], 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) [ 514.055195][T19496] binder: 19493:19496 transaction failed 29189/-22, size 24-0 line 2903 [ 514.080683][T19496] binder: 19493:19496 ioctl c0306201 20000440 returned -14 [ 514.095862][T19488] BFS-fs: bfs_fill_super(): No BFS filesystem on loop5 (magic=db950000) 19:24:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 514.194299][T19504] BFS-fs: bfs_fill_super(): No BFS filesystem on loop5 (magic=db950000) [ 514.215903][T19513] binder: 19512:19513 transaction failed 29189/-22, size 24-0 line 2903 [ 514.229201][T19513] binder: 19512:19513 ioctl c0306201 20000440 returned -14 19:24:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0xa00000000000000, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) socket$inet(0x2, 0x7, 0x5) setsockopt$inet6_MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f0000000240)={{0xa, 0x4e21, 0x2, @mcast2, 0x4}, {0xa, 0x4e22, 0x101, @mcast1, 0x1}, 0x81, [0x9, 0x6, 0x2, 0x1f, 0x7ff, 0xbf6, 0x5, 0x1ff]}, 0x5c) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000140)={0x81e3, 0x1000, 0x80, 0x9, 0x8000}, 0x14) [ 514.353241][T19518] binder: 19517:19518 transaction failed 29189/-22, size 24-0 line 2903 [ 514.387318][T19518] binder: 19517:19518 ioctl c0306201 20000440 returned -14 19:24:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1200000000000000, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 514.468897][T19527] binder: 19526:19527 ioctl c0306201 20000440 returned -14 [ 514.505589][T19527] binder: 19526:19527 ioctl c0306201 20000440 returned -14 19:24:04 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000080)={0x0, @aes256, 0x2, "112b05be654813dc"}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f00000000c0)={0x0, 0x1, 0x3, 0x84, &(0x7f0000ffd000/0x1000)=nil, 0x8}) sendfile(r1, r2, 0x0, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001280)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000001400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000002000000}, 0xc, &(0x7f00000013c0)={&(0x7f00000012c0)=@ipv6_delroute={0xd4, 0x19, 0x406, 0x70bd28, 0x25dfdbfe, {0xa, 0x20, 0x94, 0x6, 0x0, 0x3, 0xfd, 0x9, 0x2000}, [@RTA_METRICS={0x68, 0x8, "0646ba7b4ba6ab769a8c6e2f63c78be7218930a859bce06fba8a23ed12984d978e951e60c5e153526a00f2464195760bb4bf4b079da9730ee9d8b19e6ff53d710c1c887e6d6db0f6ddaa725c93a53896616689c686baa4bf73d4deb25e8bdd1956"}, @RTA_METRICS={0x1c, 0x8, "2591a34234bef4c6b2972ff4c349c043db8bdeed7c25cdbc"}, @RTA_GATEWAY={0x14, 0x5, @rand_addr="9ec1684da46387e115ceed9d14892809"}, @RTA_PREF={0x8, 0x14, 0x4}, @RTA_OIF={0x8, 0x4, r3}, @RTA_EXPIRES={0x8, 0x17, 0x3}, @RTA_MARK={0x8}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40}, 0x20000800) 19:24:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x4800000000000000, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 514.564131][T19532] device eql entered promiscuous mode 19:24:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x4c00000000000000, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 514.617331][T19537] binder: 19536:19537 ioctl c0306201 20000440 returned -14 [ 514.639894][T19537] binder: 19536:19537 ioctl c0306201 20000440 returned -14 19:24:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x6800000000000000, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 514.711674][T19540] binder: 19539:19540 ioctl c0306201 20000440 returned -14 [ 514.861810][T19547] binder: 19546:19547 ioctl c0306201 20000440 returned -14 19:24:07 executing program 2: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x400, 0x8d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, 0x0, 0x0, 0x0) 19:24:07 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x7fff, 0xd, 0x16, 0x1, "9915ab25513747963956e1ff063f0793ebd4b55695c038249b8ee81bdb3cf76b81e0eb3cd38ddf37fed0dd5440785b679d31df41071691b63429e989822cb0ae", "5cfeefc1ca834a30d76f495aeb1b36431221abf811afcd8398a6f73793ff5f91", [0x28, 0xfffffffffffffffc]}) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:24:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0x2}}], 0x1, 0x0, 0x0) 19:24:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x6c00000000000000, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:07 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = getpgrp(0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)) gettid() ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000100)={0xc, @raw_data="5cdac88cc29a79689afdd237ce57633527fef12ea2d8be4692a038980a13ee72eb1f797730299aaf55ed99ba915cd6615f9b941bd296014699b21a61eec24445aefdba2ef8d472d879c690d9479114999809941a67bf124f6b77902ac57eec89e21500227cf35b64920ce1cf7ed7985f339bb246e7f6bf3d3c3a9fe82d8d002ddf35700bb266960d3ec4cb41fbf6674185a5a69af42569156e99ab7c44b77fd5ae13f819088adcef153f81660ea95efc18c4b23da41820e9afdcbb895cf0bb0f6f99a7290aac8355"}) r2 = syz_open_procfs(r1, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r2, 0x0, 0x1) 19:24:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r2, &(0x7f0000000040)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1000000000000083, 0x0) ioctl$sock_ifreq(r1, 0x891e, &(0x7f0000000100)={'eql\x00\x00\x00\xa9[\x00', @ifru_ivalue=0x100000001}) 19:24:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x7400000000000000, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 517.130654][T19567] binder_transaction: 6 callbacks suppressed [ 517.130686][T19567] binder: 19558:19567 transaction failed 29189/-22, size 24-0 line 2903 [ 517.161907][T19567] binder: 19558:19567 ioctl c0306201 20000440 returned -14 19:24:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") add_key(&(0x7f0000000700)='rxrpc\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) 19:24:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x100000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) 19:24:07 executing program 2: [ 517.302978][T19580] binder: 19579:19580 transaction failed 29189/-22, size 24-0 line 2903 [ 517.326708][T19580] binder: 19579:19580 ioctl c0306201 20000440 returned -14 19:24:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x7a00000000000000, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 517.420647][T19588] device eql entered promiscuous mode [ 517.443634][T19589] binder: 19587:19589 transaction failed 29189/-22, size 24-0 line 2903 19:24:07 executing program 2: [ 517.479487][T19589] binder: 19587:19589 ioctl c0306201 20000440 returned -14 19:24:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 517.606793][T19595] binder: 19594:19595 transaction failed 29189/-22, size 24-0 line 2903 [ 517.644656][T19595] binder: 19594:19595 ioctl c0306201 20000440 returned -14 19:24:07 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000340)=""/237) accept(r0, 0x0, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r3, 0x1000000) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000180), 0x4) sendfile(r2, r3, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r2) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$rose(r1, 0x104, 0x7, &(0x7f0000000040), &(0x7f0000000140)=0x4) 19:24:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0x8}}], 0x1, 0x0, 0x0) 19:24:07 executing program 2: 19:24:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:07 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6d) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r0, 0x0, 0x40009) 19:24:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) r3 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x4, 0x200000) r4 = semget(0x0, 0x2, 0x0) semctl$GETVAL(r4, 0x0, 0xc, &(0x7f00000002c0)=""/105) mq_timedreceive(r3, &(0x7f0000000240)=""/82, 0x52, 0x7, 0x0) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) [ 517.996221][T19611] binder: 19608:19611 transaction failed 29189/-22, size 24-0 line 2903 19:24:08 executing program 2: [ 518.043559][T19611] binder: 19608:19611 ioctl c0306201 20000440 returned -14 19:24:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 518.091596][T19619] device team0 entered promiscuous mode [ 518.101184][T19619] device team_slave_0 entered promiscuous mode 19:24:08 executing program 2: [ 518.137349][T19619] device team_slave_1 entered promiscuous mode [ 518.168166][T19624] binder: 19623:19624 transaction failed 29189/-22, size 24-0 line 2903 [ 518.176915][T19624] binder: 19623:19624 ioctl c0306201 20000440 returned -14 19:24:08 executing program 2: [ 518.217487][T19624] binder: 19623:19624 transaction failed 29189/-22, size 24-0 line 2903 [ 518.243982][T19624] binder: 19623:19624 ioctl c0306201 20000440 returned -14 19:24:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:08 executing program 2: [ 518.370706][T19632] binder: 19630:19632 transaction failed 29189/-22, size 24-0 line 2903 [ 518.403016][T19632] binder: 19630:19632 ioctl c0306201 20000440 returned -14 19:24:08 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040)) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:24:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0x10}}], 0x1, 0x0, 0x0) 19:24:08 executing program 2: 19:24:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:08 executing program 4: mlockall(0x8000000000000001) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x40, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000100)={0x0, 0x3, 0x400, 0x3, 0x6}) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000080)=0x7) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r2, r3, 0x0, 0x1) 19:24:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) 19:24:08 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:24:08 executing program 2: [ 518.929157][T19656] binder: 19651:19656 transaction failed 29189/-22, size 24-0 line 2903 [ 519.022839][T19656] binder: 19651:19656 ioctl c0306201 20000440 returned -14 19:24:09 executing program 2: 19:24:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:09 executing program 2: [ 519.199643][T19674] binder: 19673:19674 transaction failed 29189/-22, size 24-0 line 2903 [ 519.222728][T19674] binder: 19673:19674 ioctl c0306201 20000440 returned -14 19:24:09 executing program 2: 19:24:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 519.391581][T19682] binder: 19681:19682 ioctl c0306201 20000440 returned -14 19:24:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0xf5}}], 0x1, 0x0, 0x0) 19:24:09 executing program 2: 19:24:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:09 executing program 4: mlockall(0x3) r0 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x1000, 0x8000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000200)={0x8, 0x120, 0xfa00, {0x2, {0x9, 0x4, "bf1ca68b5b86359013277ca02b6a1581c39fd2b8dd82e0a47be454a416461dd588dd37b8c68fd73e13c3700069097dfe397c67ef776f3758d8519530e0c6134558167d3236a62213fede9e1a6ce1206f257e7847db54737f5a0f016cf96885d152aadf2e709e03447d6d55943221704e247f1705ba28a12a463648ee3535f89ffda943fb4d58a23fef048e0c76763c8fe8b905d00841e2e56211fe90a22b16272141bda1c93b672e3866d27cba0bee9bbee1a650e31381de8ef7fb1f24e206ece60fdb9a6cb92297e19919b63d9d0098c94d659c52a396a107daa1e974ea08564abf6192b9322e2763baa9383262bc874ff3c89bfcc03226eca3f12603342f90", 0xd0, 0x7fffffff, 0xffffffffffffffb8, 0x1, 0x26c, 0x7343, 0x1, 0x1}, r1}}, 0x128) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000180)='stat\x00') getsockopt$llc_int(r2, 0x10c, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendfile(r2, r4, 0x0, 0x1) flistxattr(r4, &(0x7f0000000340)=""/4096, 0x1000) 19:24:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x20000, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20c000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r4, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e20}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040811}, 0x81) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) 19:24:09 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000140)={0x8, {0x9, 0x7, 0x80, 0x0, 0x4, 0x7}}) r1 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r3, 0x1000000) sendfile(r2, r1, &(0x7f0000000040), 0xeffffdef) close(r2) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:24:09 executing program 2: [ 519.835481][T19694] binder: 19689:19694 ioctl c0306201 20000440 returned -14 19:24:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:09 executing program 2: 19:24:10 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000000040)={0x6, 0x1000}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000180)={0xff, 0x3ff}) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000140)=0x1, 0x4) close(r0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) [ 520.015728][T19709] binder: 19704:19709 ioctl c0306201 20000440 returned -14 19:24:10 executing program 2: 19:24:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 520.073969][T19711] device eql entered promiscuous mode [ 520.203578][T19721] binder: 19720:19721 ioctl c0306201 20000440 returned -14 19:24:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0x3f00}}], 0x1, 0x0, 0x0) 19:24:10 executing program 2: 19:24:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:10 executing program 4: r0 = getpgid(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0xbcbd) mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x2, r2}) sendfile(r1, r2, 0x0, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@dev, @in6=@initdev}}, {{}, 0x0, @in6=@empty}}, &(0x7f00000000c0)=0xe8) 19:24:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x203, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) socketpair(0x11, 0xa, 0x3, &(0x7f0000000040)={0xffffffffffffffff}) lsetxattr$security_evm(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='security.evm\x00', &(0x7f0000000380)=@md5={0x1, "53e3c85ad1cc3032db6c7ca2afe43277"}, 0x11, 0x1) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000140)=0x9, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) write$smack_current(r6, &(0x7f0000000240)='/dev/net/tun\x00', 0xd) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) fsetxattr$security_evm(r5, &(0x7f00000003c0)='security.evm\x00', &(0x7f0000000400)=@v2={0x7, 0x0, 0x0, 0x1, 0x5b, "776748202537bc9fcd23bdca5c7d02900494227e08e4a22babe902db906c43fce6b8541df42436ff4c57a254b65e4a4c113c2446528372c14fc685a2d052540e643bf6b2d46da1abd283605b50950d0e91f6e7e0cb9a320630de87"}, 0x65, 0x2) 19:24:10 executing program 2: [ 520.753962][T19735] binder: 19729:19735 ioctl c0306201 20000440 returned -14 19:24:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:10 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) sync_file_range(r0, 0x5, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:24:10 executing program 2: [ 520.914956][T19746] device eql entered promiscuous mode [ 520.954682][T19747] binder: 19744:19747 ioctl c0306201 20000440 returned -14 19:24:11 executing program 2: 19:24:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:11 executing program 2: [ 521.151462][T19758] binder: 19757:19758 ioctl c0306201 20000440 returned -14 19:24:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0x4000}}], 0x1, 0x0, 0x0) 19:24:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:11 executing program 2: 19:24:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r3, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) ioctl$sock_ifreq(r2, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) 19:24:11 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000100)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffff9c, 0x0, 0x6, &(0x7f0000000140)='lapb0\x00', 0xffffffffffffffff}, 0x30) r1 = syz_open_procfs(r0, &(0x7f0000000000)='clear_refs\x00') ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)=0x5) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r2, 0x0, 0x1) getpeername$netlink(r2, &(0x7f0000000200), &(0x7f0000000240)=0xc) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x2, @dev={[], 0x1a}, 'lapb0\x00'}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0) [ 521.559928][T19770] binder: 19769:19770 ioctl c0306201 20000440 returned -14 19:24:11 executing program 2: 19:24:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 521.659449][T19780] device eql entered promiscuous mode [ 521.712218][T19784] binder: 19783:19784 ioctl c0306201 20000440 returned -14 19:24:11 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, 0xfffffffffffffd53) syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x2000) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r2) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x4) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:24:11 executing program 2: 19:24:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:11 executing program 2: [ 521.856643][T19792] binder: 19791:19792 ioctl c0306201 20000440 returned -14 19:24:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 522.021023][T19800] binder: 19798:19800 ioctl c0306201 20000440 returned -14 19:24:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0xf500}}], 0x1, 0x0, 0x0) 19:24:12 executing program 2: 19:24:12 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:24:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:12 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x1) socket$can_raw(0x1d, 0x3, 0x1) 19:24:12 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x440000, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)={0x0, 0xffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r3, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r2, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)=0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000240)={0x80000000, 0x8}, 0xc) ptrace$pokeuser(0x6, r4, 0x0, 0x2) 19:24:12 executing program 2: [ 522.502278][T19816] binder_transaction: 11 callbacks suppressed [ 522.502299][T19816] binder: 19807:19816 transaction failed 29189/-22, size 24-0 line 2903 [ 522.525589][T19816] binder: 19807:19816 ioctl c0306201 20000440 returned -14 [ 522.548652][T19820] device eql entered promiscuous mode 19:24:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:12 executing program 2: [ 522.674825][T19828] binder: 19827:19828 transaction failed 29189/-22, size 24-0 line 2903 [ 522.699282][T19828] binder: 19827:19828 ioctl c0306201 20000440 returned -14 19:24:12 executing program 2: [ 522.723853][T19828] binder: 19827:19828 transaction failed 29189/-22, size 24-0 line 2903 [ 522.743131][T19828] binder: 19827:19828 ioctl c0306201 20000440 returned -14 19:24:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:12 executing program 2: [ 522.901321][T19836] binder: 19834:19836 transaction failed 29189/-22, size 24-0 line 2903 [ 522.935464][T19836] binder: 19834:19836 ioctl c0306201 20000440 returned -14 19:24:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0xff01}}], 0x1, 0x0, 0x0) 19:24:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:13 executing program 2: 19:24:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") r1 = dup3(r0, r0, 0x80000) write$UHID_CREATE(r1, &(0x7f00000005c0)={0x0, 'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000580)=""/22, 0x16, 0x9, 0xfff, 0x8, 0xfffffffffffffff7, 0x10000}, 0x120) socketpair$unix(0x1, 0x8002, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000240)=""/214, 0xd6}, {&(0x7f0000000340)=""/240, 0xf0}], 0x3, &(0x7f0000000480)=""/166, 0xa6}, 0x40000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r4, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r3, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) 19:24:13 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x27894ed8fa12c252, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000100)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') accept$inet6(r1, 0x0, &(0x7f0000000040)) ioctl$CAPI_NCCI_GETUNIT(r1, 0x80044327, &(0x7f0000000080)=0x8) sendfile(r1, r1, 0x0, 0x1) 19:24:13 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x1, @rand_addr="6c8e74f24f44ea94d023875f7ba4eaa5", 0xbd}}, 0x494, 0x4, 0xfe96, 0x60000000, 0xb}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000240)={r2, 0x3f}, &(0x7f0000000280)=0x8) close(r0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:24:13 executing program 2: [ 523.403390][T19855] binder: 19849:19855 transaction failed 29189/-22, size 24-0 line 2903 [ 523.423007][T19855] binder: 19849:19855 ioctl c0306201 20000440 returned -14 [ 523.438650][T19855] binder: 19849:19855 transaction failed 29189/-22, size 24-0 line 2903 19:24:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 523.455578][T19855] binder: 19849:19855 ioctl c0306201 20000440 returned -14 19:24:13 executing program 2: [ 523.564705][T19866] binder: 19864:19866 transaction failed 29189/-22, size 24-0 line 2903 [ 523.598867][T19866] binder: 19864:19866 ioctl c0306201 20000440 returned -14 19:24:13 executing program 2: [ 523.626117][T19866] binder: 19864:19866 transaction failed 29189/-22, size 24-0 line 2903 [ 523.657342][T19866] binder: 19864:19866 ioctl c0306201 20000440 returned -14 19:24:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6800, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d5"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 523.749699][T19873] binder: 19872:19873 transaction failed 29189/-22, size 24-0 line 2903 [ 523.785781][T19873] binder: 19872:19873 ioctl c0306201 20000440 returned -14 19:24:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0x100000}}], 0x1, 0x0, 0x0) 19:24:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d5"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:24:14 executing program 4: mlockall(0xfffffffffffffffe) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x240800, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000300)={@ipv4={[], [], @multicast2}}, &(0x7f0000000340)=0x14) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r1, 0x7}}, 0x18) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000380)={0x1ff, {{0x2, 0x4e23, @remote}}}, 0x88) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000440)={0x3, 0x79, &(0x7f0000000240)="3045895e2127feee85ee03d5baa0b214daa8387bf2a5dfc2752fb8937d20395b9e1b08b897876b108ac77197bba14a7ed89e4dfe9a917ee3f3a4583aaf46594bcea2b8550ef469e83fd1bade7cbd437bc39a35c546f00423266b768065a37157533b588207b29fd5e0dbfeaaa1784c5822c359a7848058b417"}) sendfile(r2, r3, 0x0, 0x1) 19:24:14 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x400) r3 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f0000000040)=0x10, 0x1) close(r2) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000140)=0xe8) fsetxattr$security_capability(r1, &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000180)=@v3={0x3000000, [{0x4, 0x5}, {0x100000000, 0x40}], r4}, 0x18, 0x2) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:24:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x8880, 0x0) ioctl$KDSETMODE(r3, 0x4b3a, 0x100000000) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) 19:24:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7400, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 524.296780][T19900] binder: 19889:19900 transaction failed 29189/-22, size 24-0 line 2903 [ 524.318931][T19900] binder: 19889:19900 ioctl c0306201 20000440 returned -14 19:24:14 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x1) 19:24:14 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r4, 0x1000000) io_setup(0x9, &(0x7f0000000c00)=0x0) io_submit(r5, 0x8, &(0x7f0000000a80)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0xffffffff, r2, &(0x7f0000000240)="e66f43a38cb91740e9b094a648acc0178d1887f894ed354e12f5c2c3e66aca096f8af5861b2feaaadc8054c21ad224736f278e80f276813a34af0867956344614cc5bcd962d486f1b28ecc2ee7614b6149a4e7fbda42f5cb91f7b9fe4b215b0e356e21cdd652d579bea60207257f3a027c94a4e548e915b6e076303a0c8f8d3757830f8f", 0x84, 0x4, 0x0, 0x0, r3}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x4, r0, &(0x7f0000000440)="320cee1d041c2ad8e967117ac77fa4770f5efdb7af8d0919474802fa733819676e96e90b946b91bcd39687aace9d98ddb915ac231f16a68b5e17ac7902b0b98af82bfef3ce1b8fbeb792184b5340d1ac1127747183b8d6844ee53d101b1dabc27be17e2f8d7afadeeb55f54614013d64d35a9deac764ced1639517ee78d41bd6eb4fcf093a7d8698a121c60f5239d40184b12ff6789308fc0398f9ec551229a36842d6acec1a3d89ff017b1d99ab834f31bb37d3c4fa5ba2dab08f4bde750b833abe9ab6361d874a1b685f3f225080818e5e573255b32bdd08f544c25ccc9f53aea1496356bf58922043c0b865", 0xed, 0x40, 0x0, 0x2}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x7e40, r0, &(0x7f0000000300)="3f02a357d6712a230932de5422", 0xd, 0x9}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x7, 0x3, r1, &(0x7f0000000580)="fe1d8c67f02910451e76fe3622313b896e25bcc9fd7f691bdb13ab77f4640b9ecbf06517e6995ad5a72abf4d136a445657150a9d4a0fa42ba8d609be559c3f95d7fa8c2ebd478cd56e9e62fda15551723b7823db0e6f8b7a9e36e7f227fd80588626437aa2d7927673774c1cd79c3282cd80caed2f27d3ae995084d640160fc86f5075279a51c8db1cfdbb84e8eb603c383d6672a5e7686b430762f13ea8d3d60af8b889d08f78f904f11524d7e935a96cb06c383ad88717cdfd017b646b50ddbf15d5e9d6f96bbe54bcd7818f86753f509a", 0xd2, 0x40, 0x0, 0x0, r3}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0xff, r2, &(0x7f00000006c0)="a9aceae8c90c3a04d45dd5ad5249710745c088924bce0d0bd9f00c26ecfd5d4037001488ca3587a337db360ac04c74107a33a24669258cf4c0a7ba4986b7f18bfefc5434eab685ae9091d0c8dbe9e9ce66730855fa9cae45ef1e0bb8c9d458fd4690753a51b31e924135eaa770f2e950f48ed0ff2e863105fc4e", 0x7a, 0x100000000, 0x0, 0x3, r3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x6, r2, &(0x7f0000000780), 0x0, 0x5, 0x0, 0x2, r3}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x3, 0x9, r2, &(0x7f0000000800)="b67deeadf54888920b0cff91a513db342a2309abf1619b2eb26c8f14d095fb67ba7e79812758ab95c213a94854bd529e2932f88e8256f317daa0aadb530d6245901bfcffbcf9f4b6f9df01be333ab7d43ccde1510807031d3e7d37180ccaa297091fe8c5b6e60aece90b27a02c1db1c58bdac393919a1897935b320e3b9fdc3f8a6744d845acfe62bc37d5897aa5b4f94b2a0ec7fd28205e67c90ba880c14e75549a4593a01848a528f9e6101abf87fa869bd37689ae819f4a96d1949077571be2f9610f0dbe8b4f69496145b07443f777c7792a499637dbc9479a4bf5781ccf", 0xe0, 0x8, 0x0, 0x0, 0xffffffffffffff9c}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0xa82, r3, &(0x7f0000000940)="fe3a611d04f4051c6e2816c5e7a673e8e6ea6d239ac477600f0414f070ea6025827f76dec2eb7866adf08975de91c3026105df98a6d6117782eecaf64ef2fc5e9e30a603d8a53dff666a36f4f4fbdb7f45e3b23e444c0b186625f5b845ca832ff3e3f3d45811a109e63991bd4142dca4554a3419882e0ee8e6defe9a9fbd0357a75fe377aead373aca2a5e50d5b0bde6ccd48fe03551822f06e98032456fc0dc304fa7e20ebf31591aa4b873e711ea6aa1cddf05556fa0bec6a18a5428aa94733505c00127e673f8e4dc0a769e374bd4d23a096fc6821767570adc43af04f575f53e22", 0xe3, 0x4, 0x0, 0x1, r3}]) sendfile(r3, r4, &(0x7f00000000c0)=0xf10001, 0xeffffdef) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000ac0)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x3, 0x0, 0xfffffffffffffff9, 0x1, 0x4}, &(0x7f0000000780)=0x98) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000b80)={r6, 0x393}, &(0x7f0000000bc0)=0x8) close(r3) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x8000, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) [ 524.402196][T19908] device eql entered promiscuous mode 19:24:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d5"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 524.485917][T19914] binder: 19911:19914 ioctl c0306201 20000440 returned -14 19:24:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 524.684901][T19924] binder: 19923:19924 ioctl c0306201 20000440 returned -14 19:24:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 524.894063][T19929] binder: 19928:19929 ioctl c0306201 20000440 returned -14 19:24:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0x1000000}}], 0x1, 0x0, 0x0) 19:24:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d5"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:24:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:15 executing program 4: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x1, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000001c0)=0xc000, 0x4) mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) r3 = syz_open_procfs(r2, &(0x7f0000000180)='st!t\x00') sendfile(r1, r3, 0x0, 0x1) 19:24:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_team\x00', 0x0}) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000140)={r2, 0x1, 0x6}, 0x10) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r4, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000200)={'teql0\x00', 0x6e1c}) ioctl$sock_ifreq(r3, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) [ 525.222130][T19944] binder: 19935:19944 ioctl c0306201 20000440 returned -14 [ 525.245557][T19944] binder: 19935:19944 ioctl c0306201 20000440 returned -14 19:24:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d5"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 525.331069][T19953] device eql entered promiscuous mode 19:24:15 executing program 1: socket$inet6(0xa, 0x2, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000002c0)={0x6, 0x0, 0x3f, 0x2, 0x80}, 0x14) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) sendmsg$nfc_llcp(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x27, 0x1, 0x2, 0x3, 0x6, 0x7, "1bca15f0e98c6267055745357f1701efb3a1c94dd6693359acb443ec8b5e91a8289d437be19e2c06a57926fc68a0ddef83e19ae3fbfe3a6bacbf77044f67a2", 0x2f}, 0x60, &(0x7f0000000040)=[{&(0x7f0000000240)="5e14939f9ad531deb2ec714dbc776ea58e35cba607e176a94c050c7fac2f4f894111c02c4a7fb8c7a26408f4bd3050a046fb32ec9df775ed2c3b9591fe29efb4d5e6f9e6d2c23f382542e5ef06f47800c82b9fd7bf9620f2ee238e5e5a15ccdc30e5501e5b5f9d5bffad7db59ec43c1a9e", 0x71}], 0x1, 0x0, 0x0, 0x4000}, 0x800) bind$alg(0xffffffffffffffff, 0x0, 0x0) [ 525.429890][T19960] binder: 19957:19960 ioctl c0306201 20000440 returned -14 19:24:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d5"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 525.604107][T19969] binder: 19967:19969 ioctl c0306201 20000440 returned -14 19:24:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 525.773236][T19977] binder: 19974:19977 ioctl c0306201 20000440 returned -14 [ 525.894903][T19980] binder: 19979:19980 ioctl c0306201 20000440 returned -14 19:24:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0x2000000}}], 0x1, 0x0, 0x0) 19:24:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d5"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:24:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f00000002c0)={0x3}) r3 = dup(r2) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000240)={{0x4, 0xff}, 0x0, 0x657, 0xfff, {0x8, 0x6}, 0x4c, 0x1}) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) 19:24:16 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r2, 0x0, 0x1) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 526.130877][T19989] binder: 19986:19989 ioctl c0306201 20000440 returned -14 19:24:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d5"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 526.267873][T20002] device eql entered promiscuous mode 19:24:16 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chmod(&(0x7f0000000040)='./file0\x00', 0x40) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(r0, 0x21, 0x4, 0x0, 0xffffffffffffff45) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:24:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d5"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 526.381141][T20006] binder: 20004:20006 ioctl c0306201 20000440 returned -14 [ 526.420464][T20006] binder: 20004:20006 ioctl c0306201 20000440 returned -14 19:24:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d5"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 526.604125][T20017] binder: 20014:20017 ioctl c0306201 20000440 returned -14 19:24:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 526.801406][T20024] binder: 20022:20024 ioctl c0306201 20000440 returned -14 19:24:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0x8000000}}], 0x1, 0x0, 0x0) 19:24:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d5"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:24:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'eq\x91\xdfv\xe2\x00', 0x200}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) [ 527.019590][T20033] binder: 20031:20033 ioctl c0306201 20000440 returned -14 19:24:17 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x6bd62c07) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000040)) [ 527.072702][T20033] binder: 20031:20033 ioctl c0306201 20000440 returned -14 19:24:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d5"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 527.220210][T20048] binder: 20043:20048 ioctl c0306201 20000440 returned -14 19:24:17 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) socket$inet6(0xa, 0x6, 0xce7c) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r3 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000040)={0x2, "977b96c2abfacf3513692c6295f801edf17cf261c786d3bd229875a438b23166", 0x3, 0x1}) ftruncate(r3, 0xffffff) sendfile(r2, r3, &(0x7f00000000c0)=0xf10001, 0xeffffdef) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) close(r2) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:24:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000240)=ANY=[@ANYBLOB="ff7f000000000000a5000000000000000200000000000000", @ANYRES32=r0, @ANYBLOB="00000000000000000000000000000000000180000000000000000000", @ANYRES32=r1, @ANYBLOB="00000000010001000000000000000000000000000000000000000000"]) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) 19:24:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 19:24:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d5"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 527.439618][T20063] binder: 20062:20063 ioctl c0306201 20000440 returned -14 [ 527.469771][T20064] device eql entered promiscuous mode 19:24:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0x10000000}}], 0x1, 0x0, 0x0) 19:24:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d5"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 19:24:17 executing program 4: mlockall(0x8000000000000001) r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x7fff, 0x40) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x81000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x804, 0x70bd29, 0x25dfdbfe, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x9, 0x2, 0x5, 0x5c}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x24004010) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r2, r2, 0x0, 0x2) 19:24:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000040), 0x4000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) 19:24:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d5"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 527.979797][T20086] binder_transaction: 18 callbacks suppressed [ 527.979814][T20086] binder: 20085:20086 transaction failed 29189/-22, size 24-0 line 2903 [ 527.996800][T20086] binder: 20085:20086 ioctl c0306201 20000440 returned -14 [ 528.023009][T20086] binder: 20085:20086 transaction failed 29189/-22, size 24-0 line 2903 19:24:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d5"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 528.070456][T20086] binder: 20085:20086 ioctl c0306201 20000440 returned -14 19:24:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 528.123730][T20097] device eql entered promiscuous mode 19:24:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 528.165201][T20103] binder: 20101:20103 transaction failed 29189/-22, size 24-0 line 2903 [ 528.188630][T20103] binder: 20101:20103 ioctl c0306201 20000440 returned -14 19:24:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 528.286003][T20106] binder: 20105:20106 transaction failed 29189/-22, size 24-0 line 2903 [ 528.329930][T20106] binder: 20105:20106 ioctl c0306201 20000440 returned -14 19:24:18 executing program 1: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000040)={{0x3ff}}) 19:24:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 528.669703][T20117] binder: 20115:20117 transaction failed 29189/-22, size 24-0 line 2903 [ 528.693696][T20117] binder: 20115:20117 ioctl c0306201 20000440 returned -14 19:24:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0x3f000000}}], 0x1, 0x0, 0x0) 19:24:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:24:18 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x1) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0x100000000, 0x4) 19:24:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x89ff, &(0x7f0000000240)={'team_slave_1\x00', @ifru_settings={0x200, 0x9, @te1=&(0x7f00000001c0)={0x1, 0x5aa, 0x81}}}) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) r4 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x8, 0x101000) write$P9_RWSTAT(r4, &(0x7f0000000140)={0x7, 0x7f, 0x2}, 0x7) preadv(r3, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) finit_module(r1, &(0x7f0000000280)='team_slave_1\x00', 0x2) ioctl$sock_ifreq(r2, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) 19:24:18 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x3}}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 19:24:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 528.880576][T20137] binder: 20134:20137 transaction failed 29189/-22, size 24-0 line 2903 [ 528.901496][T20137] binder: 20134:20137 ioctl c0306201 20000440 returned -14 [ 528.915587][T20137] binder: 20134:20137 transaction failed 29189/-22, size 24-0 line 2903 19:24:18 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x80e85411) [ 528.927515][T20140] device eql entered promiscuous mode [ 528.931153][T20137] binder: 20134:20137 ioctl c0306201 20000440 returned -14 19:24:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:24:19 executing program 1: socket$inet6(0xa, 0x2, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000002c0)={0x6, 0x0, 0x3f, 0x2, 0x80}, 0x14) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) sendmsg$nfc_llcp(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x27, 0x1, 0x2, 0x3, 0x6, 0x7, "1bca15f0e98c6267055745357f1701efb3a1c94dd6693359acb443ec8b5e91a8289d437be19e2c06a57926fc68a0ddef83e19ae3fbfe3a6bacbf77044f67a2", 0x2f}, 0x60, &(0x7f0000000040)=[{&(0x7f0000000240)="5e14939f9ad531deb2ec714dbc776ea58e35cba607e176a94c050c7fac2f4f894111c02c4a7fb8c7a26408f4bd3050a046fb32ec9df775ed2c3b9591fe29efb4d5e6f9e6d2c23f382542e5ef06f47800c82b9fd7bf9620f2ee238e5e5a15ccdc30e5501e5b5f9d5bffad7db59ec43c1a9e", 0x71}], 0x1, 0x0, 0x0, 0x4000}, 0x800) bind$alg(0xffffffffffffffff, 0x0, 0x0) [ 529.039883][T20149] binder: 20147:20149 transaction failed 29189/-22, size 24-0 line 2903 [ 529.073785][T20149] binder: 20147:20149 ioctl c0306201 20000440 returned -14 19:24:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:19 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d5"]) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 529.245231][T20162] binder: 20161:20162 transaction failed 29189/-22, size 24-0 line 2903 [ 529.263244][T20162] binder: 20161:20162 ioctl c0306201 20000440 returned -14 19:24:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0x40000000}}], 0x1, 0x0, 0x0) 19:24:19 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d5"]) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 19:24:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:19 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') rt_sigpending(&(0x7f0000000240), 0x8) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x202800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="34000000e5dc6f5c09a34d6405bdcfd1", @ANYRES16=r1, @ANYBLOB="2a0229bd7000fbdbdf25010000000000000001410000001800170000000d000000096574683a726f736530000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r2, r3, 0x0, 0x1) creat(&(0x7f0000000040)='./file0\x00', 0x100) 19:24:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) [ 529.750361][T20173] binder: 20172:20173 transaction failed 29189/-22, size 24-0 line 2903 19:24:19 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d5"]) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 529.796607][T20173] binder: 20172:20173 ioctl c0306201 20000440 returned -14 19:24:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:19 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d5"]) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 529.893792][T20186] binder: 20185:20186 ioctl c0306201 20000440 returned -14 19:24:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet(0x10, 0x4004000000000003, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a00050000000003fffff1ffffff0000ff7e", 0x24}], 0x1}, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=""/176, 0xb0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r3, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r2, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) 19:24:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:20 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) [ 530.071633][T20200] binder: 20198:20200 ioctl c0306201 20000440 returned -14 [ 530.117766][T20202] binder: 20201:20202 ioctl c0306201 20000440 returned -14 [ 530.208594][T20208] device eql entered promiscuous mode 19:24:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0x8dffffff}}], 0x1, 0x0, 0x0) 19:24:20 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d5"]) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 19:24:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:20 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x8002, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, 0xad, 0x1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x1000}) mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f00000001c0)) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f00000000c0)={0x0, @reserved}) sendfile(r1, r2, 0x0, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) 19:24:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x101, 0x140) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000140)=r3) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) [ 530.618393][T20222] binder: 20218:20222 ioctl c0306201 20000440 returned -14 19:24:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:20 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d5"]) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 530.695684][T20227] device eql entered promiscuous mode 19:24:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d5"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 530.794192][T20235] binder: 20231:20235 ioctl c0306201 20000440 returned -14 19:24:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d5"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:24:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 530.997594][T20242] binder: 20241:20242 ioctl c0306201 20000440 returned -14 19:24:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 531.105322][T20250] binder: 20247:20250 ioctl c0306201 20000440 returned -14 [ 531.151928][T20252] binder: 20251:20252 ioctl c0306201 20000440 returned -14 19:24:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0xf0ffffff}}], 0x1, 0x0, 0x0) 19:24:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d5"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:24:21 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) sync_file_range(r0, 0x5, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:24:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) r3 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x14000000000000, 0x20000) openat$cgroup_type(r3, &(0x7f0000000140)='cgroup.type\x00', 0x2, 0x0) 19:24:21 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_targets\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x1) 19:24:21 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d5"]) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 531.597884][T20270] binder: 20261:20270 ioctl c0306201 20000440 returned -14 [ 531.607691][T20270] binder: 20261:20270 ioctl c0306201 20000440 returned -14 19:24:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 531.688111][T20275] device eql entered promiscuous mode 19:24:21 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d5"]) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 531.773245][T20281] binder: 20279:20281 ioctl c0306201 20000440 returned -14 19:24:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:21 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d5"]) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 531.940101][T20288] binder: 20287:20288 ioctl c0306201 20000440 returned -14 19:24:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:24:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0xf5000000}}], 0x1, 0x0, 0x0) 19:24:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:22 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_re\xbaC\xbc') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000040)) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x8) sendfile(r0, r1, 0x0, 0x1) 19:24:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:24:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x6, 0x9, 0x1, 0x0, 0x0, 0x8, 0x8000, 0x4, 0x100000001, 0x8, 0x2a60, 0xd, 0x100000000, 0x7ff, 0x3, 0x9, 0x1f, 0x8, 0x1, 0x4, 0x0, 0x5, 0x401, 0x5, 0x4, 0xfffffffffffffffb, 0x6e71, 0x1, 0x7, 0x3, 0x3f, 0x4, 0x0, 0x7, 0x2b, 0x71b0, 0x0, 0x40, 0x2, @perf_config_ext={0x3f, 0x9e}, 0x404, 0x80000000, 0x4312, 0x2, 0x8188, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffff9c, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_mr_vif\x00') ioctl$LOOP_SET_FD(r3, 0x4c00, r2) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8957, &(0x7f00000000c0)={'\a\x00\x00\x00\x00\x80\"\x00\x00\x00\x00\x00\x00\x00\x00@', @ifru_map={0x2e8941dd, 0x3f, 0x2c16f25f, 0x7, 0x1, 0xfffffffffffffff8}}) 19:24:22 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) sync_file_range(r0, 0x5, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) [ 532.481969][T20309] binder: 20307:20309 ioctl c0306201 20000440 returned -14 19:24:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 532.610936][T20322] binder: 20320:20322 ioctl c0306201 20000440 returned -14 19:24:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 532.702177][T20328] binder: 20327:20328 ioctl c0306201 20000440 returned -14 19:24:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:24:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 532.859490][T20335] binder: 20333:20335 ioctl c0306201 20000440 returned -14 [ 532.879222][T20335] binder: 20333:20335 ioctl c0306201 20000440 returned -14 [ 532.983429][T20339] binder: 20338:20339 ioctl c0306201 20000440 returned -14 [ 533.008313][T20339] binder_transaction: 18 callbacks suppressed [ 533.008330][T20339] binder: 20338:20339 transaction failed 29189/-22, size 24-0 line 2903 [ 533.034133][T20339] binder: 20338:20339 ioctl c0306201 20000440 returned -14 19:24:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0xff010000}}], 0x1, 0x0, 0x0) 19:24:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:24:23 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x1) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r2, 0x8102000) 19:24:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:23 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) sync_file_range(r0, 0x5, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:24:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) fgetxattr(r1, &(0x7f0000000040)=@random={'system.', 'eql\x00\x00\x00\xa9[\x00'}, &(0x7f0000000240)=""/122, 0x7a) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) [ 533.384781][T20348] binder: 20347:20348 transaction failed 29189/-22, size 24-0 line 2903 [ 533.435013][T20348] binder: 20347:20348 ioctl c0306201 20000440 returned -14 19:24:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 533.479699][T20359] device eql entered promiscuous mode 19:24:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 533.597214][T20365] binder: 20363:20365 transaction failed 29189/-22, size 24-0 line 2903 [ 533.631538][T20365] binder: 20363:20365 ioctl c0306201 20000440 returned -14 19:24:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 533.736552][T20370] binder: 20369:20370 transaction failed 29189/-22, size 24-0 line 2903 [ 533.779761][T20370] binder: 20369:20370 ioctl c0306201 20000440 returned -14 [ 533.817786][T20370] binder: 20369:20370 transaction failed 29189/-22, size 24-0 line 2903 [ 533.871096][T20370] binder: 20369:20370 ioctl c0306201 20000440 returned -14 19:24:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:24:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 534.034544][T20380] binder: 20379:20380 transaction failed 29189/-22, size 24-0 line 2903 [ 534.084442][T20380] binder: 20379:20380 ioctl c0306201 20000440 returned -14 19:24:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0xffffff8d}}], 0x1, 0x0, 0x0) 19:24:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:24:24 executing program 5: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000240)='wlan1\x00'}, 0x30) fcntl$setownex(r0, 0xf, &(0x7f00000002c0)={0x3, r1}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r5, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r4, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x13) 19:24:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:24 executing program 1: mlockall(0x8000000000000001) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x40, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000100)={0x0, 0x3, 0x400, 0x3, 0x6}) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000080)=0x7) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r2, r3, 0x0, 0x1) 19:24:24 executing program 4: mlockall(0x3) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000340)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000180)={{0x0, 0xf7ffffffffff0001}, {0xf}}) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000080)=0xe50, &(0x7f00000000c0)=0x2) tkill(r3, 0x1000000000015) ioctl$sock_ifreq(r0, 0x0, &(0x7f00000002c0)={'syzkaller0\x00', @ifru_data=&(0x7f0000000100)="2426bb539d01f31e36d5fb20df812d2958d3f70c730296a4b756e718a372f43d"}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') fcntl$getown(r0, 0x9) ioctl$KVM_GET_PIT(r4, 0xc048ae65, &(0x7f0000000200)) sendfile(r0, r4, 0x0, 0x1) [ 534.345317][T20397] binder: 20389:20397 transaction failed 29189/-22, size 24-0 line 2903 [ 534.375851][T20397] binder: 20389:20397 ioctl c0306201 20000440 returned -14 [ 534.410652][T20400] device eql entered promiscuous mode 19:24:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d5"]) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 534.500520][T20405] binder: 20404:20405 transaction failed 29189/-22, size 24-0 line 2903 [ 534.518383][T20405] binder: 20404:20405 ioctl c0306201 20000440 returned -14 19:24:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d5"]) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:24:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d5"]) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 534.663879][T20414] binder: 20411:20414 transaction failed 29189/-22, size 24-0 line 2903 [ 534.696493][T20414] binder: 20411:20414 ioctl c0306201 20000440 returned -14 19:24:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 534.806207][T20423] binder: 20422:20423 transaction failed 29189/-22, size 24-0 line 2903 [ 534.826332][T20423] binder: 20422:20423 ioctl c0306201 20000440 returned -14 19:24:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0xfffffff0}}], 0x1, 0x0, 0x0) 19:24:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d5"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:24:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x200, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f0000000240)={0x4b, ""/75}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) setsockopt$ax25_int(r0, 0x101, 0xf, &(0x7f0000000040)=0x45e, 0x4) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) 19:24:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) r3 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x4, 0x200000) r4 = semget(0x0, 0x2, 0x0) semctl$GETVAL(r4, 0x0, 0xc, &(0x7f00000002c0)=""/105) mq_timedreceive(r3, &(0x7f0000000240)=""/82, 0x52, 0x7, 0x0) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) 19:24:25 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x10080, 0x0) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2, 0x5, 0xfd, 0x8, 0x31, 0x0, 0x70bd29, 0x25dfdbfb, [@sadb_x_sa2={0x2, 0x13, 0x5, 0x0, 0x0, 0x70bd26, 0x3506}, @sadb_address={0x5, 0x5, 0x3c, 0x80, 0x0, @in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, [], 0x10}, 0x3f}}, @sadb_x_sec_ctx={0x21, 0x18, 0x24, 0x3ff, 0xfe, "42dd4c55579137fc8b7fe766ebadc4881c811a9297be0674162810cf746faa72357b37922934a88a44bc148ba9054067d926864a99fc5568009066eaaaca59136a073fe0088c0724690fb34b50efe161e9b87c11e0e7aece3b084660e739d626edfe4333fd908a690c55532e7986eaf7aeacd10ade74cfcafe35311358daac418235f47f81f5c9f8bf80986463bc9c4898bc2f10fc65984ac8597c74910bef41692ebf09acc11263c94788fd14dd9c53e9fdf093d411a3bfbd079a407b1dfcd956143a6ab8da50027691afba08fc31350da875cb98c414cfee3da49526c6416a19d345f05fa0134d0bf596241540b1e978d996f267fb7061baad20a7c43e"}, @sadb_x_sa2={0x2, 0x13, 0x100, 0x0, 0x0, 0x70bd2a, 0x3501}, @sadb_x_filter={0x5, 0x1a, @in=@multicast1, @in6=@empty, 0x1d, 0x10, 0x10}]}, 0x188}}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r2, 0x0, 0x1) [ 535.435940][T20440] binder: 20438:20440 ioctl c0306201 20000440 returned -14 19:24:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d5"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 535.530581][T20448] device team0 entered promiscuous mode [ 535.537379][T20448] device team_slave_0 entered promiscuous mode [ 535.551712][T20448] device team_slave_1 entered promiscuous mode [ 535.569693][T20449] device eql entered promiscuous mode [ 535.615259][T20454] binder: 20453:20454 ioctl c0306201 20000440 returned -14 19:24:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d5"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 535.764989][T20459] binder: 20458:20459 ioctl c0306201 20000440 returned -14 19:24:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d5"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 535.928294][T20466] binder: 20465:20466 ioctl c0306201 20000440 returned -14 19:24:26 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x400) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) 19:24:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d5"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:24:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0x1000000000000}}], 0x1, 0x0, 0x0) [ 536.248179][T20478] binder: 20474:20478 ioctl c0306201 20000440 returned -14 19:24:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) r3 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x4, 0x200000) r4 = semget(0x0, 0x2, 0x0) semctl$GETVAL(r4, 0x0, 0xc, &(0x7f00000002c0)=""/105) mq_timedreceive(r3, &(0x7f0000000240)=""/82, 0x52, 0x7, 0x0) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) 19:24:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r3, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) write$eventfd(r0, &(0x7f0000000340)=0xea, 0x8) r4 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x7ff, 0x400) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000240)={0x0, 0x81, 0x1f, 0x1, 0x30, 0x75, 0x3f, 0x80000000, {0x0, @in6={{0xa, 0x4e24, 0xfffffffffffffad4, @dev={0xfe, 0x80, [], 0x28}, 0x6}}, 0x8, 0x20, 0x5, 0x0, 0x4}}, &(0x7f00000001c0)=0xb0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000300)={0x7, 0x0, 0x0, 0x400, 0x400, 0x5, 0x9d, 0x80000000, r5}, 0x20) ioctl$sock_ifreq(r2, 0x8970, &(0x7f00000000c0)={'team_slave_0\x00', @ifru_hwaddr=@broadcast}) ioctl$sock_ifreq(r1, 0x8000008927, &(0x7f0000000140)={'\xa9\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', @ifru_flags=0xe24354e08604396e}) 19:24:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d5"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 536.413176][T20492] binder: 20491:20492 ioctl c0306201 20000440 returned -14 19:24:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d5"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:24:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 536.577947][T20503] binder: 20501:20503 ioctl c0306201 20000440 returned -14 19:24:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d5"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:24:26 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x608, 0x4) sendfile(r0, r1, 0x0, 0x1) [ 536.722691][T20509] binder: 20508:20509 ioctl c0306201 20000440 returned -14 19:24:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d5"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 536.853122][T20518] binder: 20515:20518 ioctl c0306201 20000440 returned -14 19:24:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0x10000000000000}}], 0x1, 0x0, 0x0) 19:24:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) r3 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x4, 0x200000) r4 = semget(0x0, 0x2, 0x0) semctl$GETVAL(r4, 0x0, 0xc, &(0x7f00000002c0)=""/105) mq_timedreceive(r3, &(0x7f0000000240)=""/82, 0x52, 0x7, 0x0) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) 19:24:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d5"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:24:27 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f00000009c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a00)={'team0\x00', r1}) mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r2, r3, 0x0, 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) 19:24:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) [ 537.318141][T20541] binder: 20534:20541 ioctl c0306201 20000440 returned -14 19:24:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 537.393971][T20545] device eql entered promiscuous mode 19:24:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d5"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:24:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 537.453005][T20547] binder: 20546:20547 ioctl c0306201 20000440 returned -14 [ 537.576139][T20554] binder: 20553:20554 ioctl c0306201 20000440 returned -14 19:24:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d5"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:24:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 537.713719][T20562] binder: 20561:20562 ioctl c0306201 20000440 returned -14 19:24:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d5"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 19:24:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0x100000000000000}}], 0x1, 0x0, 0x0) 19:24:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) r3 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x4, 0x200000) r4 = semget(0x0, 0x2, 0x0) semctl$GETVAL(r4, 0x0, 0xc, &(0x7f00000002c0)=""/105) mq_timedreceive(r3, &(0x7f0000000240)=""/82, 0x52, 0x7, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) 19:24:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:28 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x5, 0x80) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r2, 0x0, 0x1) 19:24:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d5"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 19:24:28 executing program 5: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) socket$l2tp(0x18, 0x1, 0x1) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000240)='\x84\xbf\x1c\xe6\x03\x8a3\xa7n\xc0b10\xf7\xe7\xfb\x81\xa4\xc4\x97\x84Gb\xec-op\xcd\xa2DM\xd7\x9a\xefZU\xf8\f\x02\x9f\x80\xabv\xc8;o\xb5Q\xa9\x04,\x89\xa58oSu\x84\x10\x9e\x8f\x920\x90\xad]\t\a\fg\xb3V\t(R\x93\xb8\xde', 0x80000000000004) ftruncate(r1, 0x1000000) ioctl$KIOCSOUND(r0, 0x4b2f, 0x1) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x516, &(0x7f0000000040)={0x4}, 0x8) bind$alg(0xffffffffffffffff, 0x0, 0x0) [ 538.237915][T20578] binder_transaction: 13 callbacks suppressed [ 538.237931][T20578] binder: 20577:20578 transaction failed 29189/-22, size 24-0 line 2903 [ 538.285841][T20578] binder: 20577:20578 ioctl c0306201 20000440 returned -14 19:24:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x4, 0x200000) r3 = semget(0x0, 0x2, 0x0) semctl$GETVAL(r3, 0x0, 0xc, &(0x7f00000002c0)=""/105) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) 19:24:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d5"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 538.423110][T20593] binder: 20592:20593 transaction failed 29189/-22, size 24-0 line 2903 [ 538.471131][T20593] binder: 20592:20593 ioctl c0306201 20000440 returned -14 19:24:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x4, 0x200000) semget(0x0, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) [ 538.644033][T20604] binder: 20603:20604 transaction failed 29189/-22, size 24-0 line 2903 19:24:28 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x8, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1c}}, 0x7ff}}, 0xffffffff, 0x81, 0xfffffffffffffff8, 0x4, 0x2}, &(0x7f0000000040)=0x98) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={r3, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x8001, 0x6}, 0x90) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) [ 538.707411][T20604] binder: 20603:20604 ioctl c0306201 20000440 returned -14 19:24:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0x200000000000000}}], 0x1, 0x0, 0x0) 19:24:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x4, 0x200000) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) 19:24:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:28 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x1) [ 538.919952][T20618] binder: 20617:20618 transaction failed 29189/-22, size 24-0 line 2903 [ 538.954741][T20618] binder: 20617:20618 ioctl c0306201 20000440 returned -14 19:24:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:29 executing program 5: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0xfffffffffffffe05) 19:24:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) [ 539.126186][T20628] binder: 20627:20628 transaction failed 29189/-22, size 24-0 line 2903 [ 539.154317][T20628] binder: 20627:20628 ioctl c0306201 20000440 returned -14 19:24:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) [ 539.284979][T20640] binder: 20638:20640 transaction failed 29189/-22, size 24-0 line 2903 [ 539.311142][T20640] binder: 20638:20640 ioctl c0306201 20000440 returned -14 [ 539.324522][T20640] binder: 20638:20640 transaction failed 29189/-22, size 24-0 line 2903 19:24:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) [ 539.370153][T20640] binder: 20638:20640 ioctl c0306201 20000440 returned -14 19:24:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 539.480803][T20649] binder: 20648:20649 transaction failed 29189/-22, size 24-0 line 2903 [ 539.504345][T20649] binder: 20648:20649 ioctl c0306201 20000440 returned -14 19:24:29 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x8, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1c}}, 0x7ff}}, 0xffffffff, 0x81, 0xfffffffffffffff8, 0x4, 0x2}, &(0x7f0000000040)=0x98) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={r3, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x8001, 0x6}, 0x90) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:24:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0x800000000000000}}], 0x1, 0x0, 0x0) 19:24:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) 19:24:29 executing program 4: mlockall(0x8000000000000001) r0 = getpgrp(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000040)='clear_refs\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r2, 0x0, 0x1) 19:24:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) [ 539.822986][T20664] binder: 20661:20664 transaction failed 29189/-22, size 24-0 line 2903 [ 539.853413][T20664] binder: 20661:20664 ioctl c0306201 20000440 returned -14 19:24:30 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000040), &(0x7f0000000140)=0x4) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) ioctl(r2, 0x20, &(0x7f0000000240)="1c210b6bd29873f528beab5cd5acfc6e5ac84f49ea9da186a88b766aef4f4d1b1cb295db776b11bde2d1236e447bc02526fee250f156b7b241b64cb31af0207ab18afabec7e06b99d07618bc9a77fec1591ce63edd9ab6117eaccb92672c88dbd124b51c8f8db9ebe3cfdd4f02405d4dbdf488d654feea306007de9cbad65c4359f0744c71d9a1a4030a5ad94ed5a07be07a202d9368dccc79d4db944bb34f7ea0d04b43bb2bb2694c4c853b9799b5d3edf20a177924efe23e73e30351ef1b496edbd55bd83fd3dbc6d87c089529e728ba234f48917ce7618c686a966b378769f0bb11b972f7d03b875c4555ac763163149e7b86f0") ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f00000001c0)={0xc81, 0x3, 0x81}) r3 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x8000) sendfile(r2, r3, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r3) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000180)={0xb3, 0x7, 0x698000000000000}) 19:24:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) 19:24:30 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) [ 540.101625][T20681] binder: 20679:20681 transaction failed 29189/-22, size 24-0 line 2903 [ 540.113396][T20681] binder: 20679:20681 ioctl c0306201 20000440 returned -14 19:24:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:30 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) [ 540.300033][T20693] binder: 20691:20693 ioctl c0306201 20000440 returned -14 19:24:30 executing program 2: socket$inet6(0xa, 0x5, 0x3) r0 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x5, 0x20000) setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f00000001c0)=0x9, 0x4) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000140)={0x0, 0x100000001, 0x100, &(0x7f0000000040)=0x2}) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:24:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0x1000000000000000}}], 0x1, 0x0, 0x0) 19:24:30 executing program 5: io_setup(0x7, &(0x7f0000000080)=0x0) io_getevents(r0, 0x3, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x10200, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r2, 0x0, 0x1) 19:24:30 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) 19:24:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:30 executing program 4: mlockall(0x8000000000000001) r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x216b428d, 0x32a02) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x13, 0x64, &(0x7f0000000080)="35453b9f45a5d357cf7edd646c6eb201d8b3f5cc672d1e4bd32dc37f976c24224dad53a6279aa46cd09e468705a9bfc787c5cc2c8ed2529324929a51ac57c3598c8491dd0fdc8a0f0da87c0707919917163f42e14cd32c7c9326e42cfca319cb52079d70"}) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r2, 0x0, 0x1) 19:24:30 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) [ 540.725661][T20714] binder: 20708:20714 ioctl c0306201 20000440 returned -14 19:24:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:30 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) [ 540.888516][T20723] binder: 20721:20723 ioctl c0306201 20000440 returned -14 19:24:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:30 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) 19:24:31 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) [ 541.071147][T20730] binder: 20728:20730 ioctl c0306201 20000440 returned -14 [ 541.087317][T20730] binder: 20728:20730 ioctl c0306201 20000440 returned -14 19:24:31 executing program 2: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x20000000000000, 0x1, 0x8, 0xf7da, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r2, 0x4}, &(0x7f00000001c0)=0x8) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:24:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0x3f00000000000000}}], 0x1, 0x0, 0x0) 19:24:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:31 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) 19:24:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = accept4(r3, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r4, 0x4, 0x2000) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') r6 = syz_open_dev$amidi(&(0x7f0000000640)='/dev/amidi#\x00', 0x3, 0x0) sendfile(r4, r5, 0x0, 0x10000000000443) writev(r4, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r4, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r4, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000740), 0x4) bind$xdp(r5, &(0x7f0000000380)={0x2c, 0x1, 0x0, 0x33}, 0x10) syz_open_dev$sndctrl(0x0, 0x0, 0x640801) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) r8 = dup(r1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40042409, 0x0) preadv(r7, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r2, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) 19:24:31 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r0, 0x0, 0x4f61f79b) [ 541.651252][T20758] binder: 20750:20758 ioctl c0306201 20000440 returned -14 19:24:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:31 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) 19:24:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) [ 541.768222][T20765] binder: 20764:20765 ioctl c0306201 20000440 returned -14 19:24:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) [ 541.896876][T20775] binder: 20774:20775 ioctl c0306201 20000440 returned -14 [ 541.915324][T20770] device eql entered promiscuous mode 19:24:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 542.013225][T20781] binder: 20780:20781 ioctl c0306201 20000440 returned -14 19:24:32 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000006c0)={'yam0\x00', 0x100}) r1 = syz_open_dev$media(&(0x7f0000000900)='/dev/media#\x00', 0x34a, 0x8001) accept$nfc_llcp(r1, 0x0, &(0x7f0000000940)) r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000980), &(0x7f00000009c0)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x33, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)={&(0x7f0000000040)='./file0\x00', r3}, 0x10) setxattr$security_smack_entry(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='security.SMACK64\x00', &(0x7f0000000680)='\xac\x00', 0x2, 0x3) r4 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) readlink(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)=""/24, 0x18) ioctl$KVM_S390_UCAS_MAP(r4, 0x4018ae50, &(0x7f0000000840)={0x95, 0xfffffffffffff801, 0x200}) ioctl$EVIOCGNAME(r4, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) r5 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r5, 0x1000000) sendfile(r4, r5, &(0x7f00000000c0)=0xf10001, 0xeffffdef) writev(r3, &(0x7f0000000500)=[{&(0x7f00000001c0)="0b45d0c815773db60b709907ec2be2c7ed2b4577bbc31853d3b297fa24b96b8ba0ee74bbe886a63eb7d7749c7d3b7faa02dda3cf716aed7433", 0x39}, {&(0x7f0000000240)="0af926d86a91a39859bfc2f96cf575466b5604e9146fd4bd66e5a20e2d24df16f5bfdb6da5a459357fbc64bfcccf145bc1ea9fda2d795663be2c45abcb31d2631de4fe87852b3a2fc9a05ade423348821c158bb9c011fda2c42e9f1dc9b59e572007dcc57aca5f3c4b1eeac22775fbde88d6901655e92c358d55b40ccb411d260f0cb048ce5913df2e8b0fd64c3378fef5d79b63ad67502bd4e658ab7081dca19e40e3754714446db22a8016c33355e5e1d42d3cad9cf93a5972d8a0076b8a8a154837bcd2d44e61be01dc60fcf496783fe9160e26b567307c1e9a579f18b7", 0xdf}, {&(0x7f0000000440)="95c79c681a77317eb48ccc59ecfb458c18b4620d659141dfcf48744ba405100551e42692c0349067bda8d5038fa4dbf2c55e10f7b43e6f8d51afa630", 0x3c}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f0000000480)="470986f7e4b94350b40944ee1bbad084d46435e2512bda34c2dd648de32aa910d4307d7e5adce1188414d5a0bce6b5465691b8671658b5aa89a95c0bdf6e6e9c7638c6d8d771957ebff82bf1517e6e4e346b", 0x52}], 0x5) r6 = creat(&(0x7f0000000580)='./file0\x00', 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000700)={0x0, 0x1}, &(0x7f0000000740)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000780)={r7, 0x20}, &(0x7f00000007c0)=0x8) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000800)) connect$inet(r6, &(0x7f00000005c0)={0x2, 0x4e21, @remote}, 0x10) close(r4) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000200)={0x10001, 0x9, 0x4}) bind$alg(r4, 0x0, 0xfe7b) 19:24:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0x4000000000000000}}], 0x1, 0x0, 0x0) 19:24:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) 19:24:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 542.646783][T20800] binder: 20799:20800 ioctl c0306201 20000440 returned -14 [ 542.664705][T20800] binder: 20799:20800 ioctl c0306201 20000440 returned -14 19:24:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = accept4(r3, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r4, 0x4, 0x2000) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') r6 = syz_open_dev$amidi(&(0x7f0000000640)='/dev/amidi#\x00', 0x3, 0x0) sendfile(r4, r5, 0x0, 0x10000000000443) writev(r4, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r4, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r4, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000740), 0x4) bind$xdp(r5, &(0x7f0000000380)={0x2c, 0x1, 0x0, 0x33}, 0x10) syz_open_dev$sndctrl(0x0, 0x0, 0x640801) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) r8 = dup(r1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40042409, 0x0) preadv(r7, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r2, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) 19:24:32 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') write$UHID_CREATE2(r0, &(0x7f00000001c0)={0xb, 'syz1\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x8, 0x9, 0x9, 0x5, 0xffffffff}, 0x118) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x7, @mcast2, 0x1}], 0x1c) 19:24:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) 19:24:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) [ 542.801582][T20814] binder: 20813:20814 ioctl c0306201 20000440 returned -14 19:24:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) 19:24:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) [ 543.052742][T20826] binder: 20824:20826 ioctl c0306201 20000440 returned -14 [ 543.084156][T20819] device eql entered promiscuous mode [ 543.091110][T20826] binder: 20824:20826 ioctl c0306201 20000440 returned -14 19:24:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 543.289417][T20835] binder_transaction: 14 callbacks suppressed [ 543.289434][T20835] binder: 20834:20835 transaction failed 29189/-22, size 24-0 line 2903 [ 543.306901][T20835] binder: 20834:20835 ioctl c0306201 20000440 returned -14 19:24:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) 19:24:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:33 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x1) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0xfffffffffffffffe, 0x3}) [ 543.489928][T20841] binder: 20840:20841 transaction failed 29189/-22, size 24-0 line 2903 [ 543.518644][T20841] binder: 20840:20841 ioctl c0306201 20000440 returned -14 [ 543.551518][T20841] binder: 20840:20841 transaction failed 29189/-22, size 24-0 line 2903 [ 543.568203][T20841] binder: 20840:20841 ioctl c0306201 20000440 returned -14 19:24:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = accept4(r3, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r4, 0x4, 0x2000) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') r6 = syz_open_dev$amidi(&(0x7f0000000640)='/dev/amidi#\x00', 0x3, 0x0) sendfile(r4, r5, 0x0, 0x10000000000443) writev(r4, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r4, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r4, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000740), 0x4) bind$xdp(r5, &(0x7f0000000380)={0x2c, 0x1, 0x0, 0x33}, 0x10) syz_open_dev$sndctrl(0x0, 0x0, 0x640801) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) r8 = dup(r1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40042409, 0x0) preadv(r7, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) ioctl$sock_ifreq(r2, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_hwaddr=@broadcast}) 19:24:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) 19:24:33 executing program 2: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x4805) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r3, 0x1000000) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000006c0)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000000500)=0xe8) fsetxattr$security_capability(r0, &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v3={0x3000000, [{0x5, 0x3424}, {0x9, 0x8000}], r4}, 0x18, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f0000000300)=0xeaef, 0x8) sendfile(r1, r3, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x5, 0x3, &(0x7f0000000440)=[{&(0x7f0000000180)="49bd85354900317f20faa5627843154783f1ff86cee35d414af85535044db0e7bb74e8a9d65383", 0x27, 0x8}, {&(0x7f00000001c0)="e33787de5e051e868a0860df4c88a7831b0f75253cfe89cbb210fee05e153eb23ef309", 0x23, 0x7f}, {&(0x7f0000000240)="049dd7b2af3d99fc45ad6fdebe3fae522cf0c579e409cca5b380254df3e66587c847c291fb5bc2c77249cdfb2d7373b475241bc75d6ebba80cb1a9764411cdd16ee68400a8b8bdf73eba14a58278eae0158281bb7c4efe302bd7d47586a2da74626dcc5a7a74eb9612442960116e2e4ed80036e72c2be81edd1f9b34988711889a1f787e0236f67a5fde1b5f97a5c3dc", 0x90}], 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="64656275672c646f74732c6673757569643d6634677d04007b772d3f757f322d3337377b2d773833362d71357733753500312c61707072616973655f747970653d696d617379672c66736e616d653d2c003aacc44429a96340818e1e053f27094eae5a4d6cb8cba439fe7cde1e93fc3bb9d1c979441496ced631cca0da5b4fb28347c50c1d76213a704d091efbc910fb45004946970e7dc6f5fd01cc86dbfde49619873cc79103f78e5be299233381ec2dca9eb8913e25020d073037bf0d878a4abf72925e48d76d771d85f748a235f1bf6ee47dd77108d5e3eb31d707eda9225fb3082219e90d46083a4f69e5d57aef32bac2f1747985"]) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:24:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:33 executing program 4: r0 = syz_open_dev$vbi(&(0x7f00000004c0)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000500)={0x0, 0x6, "79cb56180008"}, &(0x7f0000000540)=0xe) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000580)={r1, 0x0, 0xe709, 0x9, 0x6, 0x100}, 0x14) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x7, 0x100) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r2, 0x800448d3, &(0x7f0000000240)={{0x1, 0x7, 0xffffffffffff8000, 0x8, 0x8, 0x68b}, 0x1, 0x5, 0x0, 0x2, 0x0, "f045a51faa439f2479816bad85eb6d931c9567e034bbf43dabcb6a14a3c9777311e0d330f7fe7e8adf761ec7366b10e8c4877f4e6b5c791f38201a44c9528d3ccf5a4ecd4b896ca323795793ef544ab26885f2a42c5e4ea4e1d9311fc9f29fd0ef93fde3bba22289387a4a31deed0c2d15e68c5654d8dc3fa0a567a692048e24"}) mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) setxattr$trusted_overlay_nlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.nlink\x00', &(0x7f0000000200)={'U+'}, 0x28, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000600)=',\x84HH\x1d\va\xa8\xf3Z7\xf7>2(\x98\x8a\xf1\xbcQ\xa8\xed\xa9_\xe2\xadx\x8d\xa4\x1er\x8c,P\xeeE\xa4\r@f\xec\xba\xb8of\xe4)$:\xeb\b\xc4\x8e\xbab;-\x82\x99~D\xb2\x925\x8b<\x81\xd9\xa7\xc4\xa2;\xac\xd4F\x13!\xbaq\xc5\x1c~\xc2T\a\x9c\x1d\xa4\t\xed\x98=\xeaK\xbb\xc5R\x05\x84\xf0\n\x9b\x99,\xdf\xda\xbe\xe11\xa3\xbd\xba\a\xfd\x8a\x1c\xe5g\xf6\xfd\xdc\x82N\x10\xb3\xa0\x0f\xc8\xc0IB:[<\xb8i1\xc3\xa9\xc5 l\xe2\xa4F\x84\x87\xc4+\x19\xa3\xa0\x03\x19\xc2s\b2\x8e\x1b\\\xe1\x95\xb7\x9d\x1dr\t\v\x8c\x9bz\x82Xw\xc6k\xa4%A\xef\xd6\xcb\xfe/\xbb\xa0p4\x14k\xd3\xad\xf5\x16\\\xb7_\xf5I\x0f\xef\x1e\x00\t\x1cz)\x97\n<\xcf\xb1\x88X\xb5\x8e\xd1B\xa6nW\xfdqP\xef*\xd5Q\x92J\xbf-:\xcdu\x11\xca6o\x03\xe7\xc2\xee;\xf3\a\xa5]\'\x06\xe9\x8d\x00\xd2:T\xf8\xc13\x11\xd8\x00\x00\x00@\x9a\x7f#\xae\xbb\x91\x84h~\xcb\xdb\xcb\x8b\xd7*\x82\x85O)\x85^\xbe\x84B\xeff\xd9C\x87\x19\xd0#|~\x94\xe2s\x91\xdce\xa3\xecV\x19\x81\xc7\xb8c\x82L\bB!\x83u,\x19\x8c\xf9\xeb\xda7\x99\"%u\xd9\x8d\f-;L\xfa\xda0\xf9\xd0L\xcfJ\xdav6\x89\xec\xa0\x81\x17\xea\xe8\xe9!e2\xb8\x1b\xb5\xc9\x01\xb9\xc9\r1\x8e\xde-\x01\xf1\xb2z]\xce\xb8v\xad\x04\xd6 \x0e\x9a\x8c`\xc5\x17\x8b5\xf0\xfa\x8f\xffu\x19\x9b\x06\xa8%\xdb\xf0\xbd\'\xf8\x02\x80\xbfs\xc3\xe8\xd8\xfd\x91\x99\xc46\xff\x10\xdc#') sendfile(r3, r4, 0x0, 0x1) ioctl$KVM_NMI(r4, 0xae9a) open_by_handle_at(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x200100) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000440)='trusted.overlay.opaque\x00', &(0x7f0000000480)='y\x00', 0x2, 0x1) symlinkat(&(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00') signalfd(r3, &(0x7f0000000140)={0x8}, 0x8) socket$pppoe(0x18, 0x1, 0x0) 19:24:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0x8000000000000000}}], 0x1, 0x0, 0x0) 19:24:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c12") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) [ 543.945938][T20855] binder: 20854:20855 transaction failed 29189/-22, size 24-0 line 2903 [ 543.981534][T20855] binder: 20854:20855 ioctl c0306201 20000440 returned -14 19:24:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 544.078122][T20868] FAT-fs (loop2): Unrecognized mount option "fsuuid=f4g}" or missing value 19:24:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c12") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) 19:24:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 544.163740][T20878] binder: 20877:20878 transaction failed 29189/-22, size 24-0 line 2903 [ 544.172340][T20878] binder: 20877:20878 ioctl c0306201 20000440 returned -14 19:24:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c12") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) [ 544.286729][T20886] binder: 20885:20886 transaction failed 29189/-22, size 24-0 line 2903 [ 544.295592][T20876] device eql entered promiscuous mode [ 544.317679][T20886] binder: 20885:20886 ioctl c0306201 20000440 returned -14 19:24:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 544.414076][T20892] binder: 20891:20892 transaction failed 29189/-22, size 24-0 line 2903 [ 544.436941][T20892] binder: 20891:20892 ioctl c0306201 20000440 returned -14 19:24:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r3 = accept4(r2, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r3, 0x4, 0x2000) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') r5 = syz_open_dev$amidi(&(0x7f0000000640)='/dev/amidi#\x00', 0x3, 0x0) sendfile(r3, r4, 0x0, 0x10000000000443) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r3, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r3, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000740), 0x4) bind$xdp(r4, &(0x7f0000000380)={0x2c, 0x1, 0x0, 0x33}, 0x10) syz_open_dev$sndctrl(0x0, 0x0, 0x640801) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) r7 = dup(r1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40042409, 0x0) preadv(r6, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) 19:24:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) 19:24:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:34 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') restart_syscall() r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x1) 19:24:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0x8dffffff00000000}}], 0x1, 0x0, 0x0) 19:24:34 executing program 2: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x4805) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r3, 0x1000000) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000006c0)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000000500)=0xe8) fsetxattr$security_capability(r0, &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v3={0x3000000, [{0x5, 0x3424}, {0x9, 0x8000}], r4}, 0x18, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f0000000300)=0xeaef, 0x8) sendfile(r1, r3, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x5, 0x3, &(0x7f0000000440)=[{&(0x7f0000000180)="49bd85354900317f20faa5627843154783f1ff86cee35d414af85535044db0e7bb74e8a9d65383", 0x27, 0x8}, {&(0x7f00000001c0)="e33787de5e051e868a0860df4c88a7831b0f75253cfe89cbb210fee05e153eb23ef309", 0x23, 0x7f}, {&(0x7f0000000240)="049dd7b2af3d99fc45ad6fdebe3fae522cf0c579e409cca5b380254df3e66587c847c291fb5bc2c77249cdfb2d7373b475241bc75d6ebba80cb1a9764411cdd16ee68400a8b8bdf73eba14a58278eae0158281bb7c4efe302bd7d47586a2da74626dcc5a7a74eb9612442960116e2e4ed80036e72c2be81edd1f9b34988711889a1f787e0236f67a5fde1b5f97a5c3dc", 0x90}], 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="64656275672c646f74732c6673757569643d6634677d04007b772d3f757f322d3337377b2d773833362d71357733753500312c61707072616973655f747970653d696d617379672c66736e616d653d2c003aacc44429a96340818e1e053f27094eae5a4d6cb8cba439fe7cde1e93fc3bb9d1c979441496ced631cca0da5b4fb28347c50c1d76213a704d091efbc910fb45004946970e7dc6f5fd01cc86dbfde49619873cc79103f78e5be299233381ec2dca9eb8913e25020d073037bf0d878a4abf72925e48d76d771d85f748a235f1bf6ee47dd77108d5e3eb31d707eda9225fb3082219e90d46083a4f69e5d57aef32bac2f1747985"]) bind$alg(0xffffffffffffffff, 0x0, 0x0) [ 545.036841][T20902] binder: 20901:20902 transaction failed 29189/-22, size 24-0 line 2903 [ 545.082264][T20902] binder: 20901:20902 ioctl c0306201 20000440 returned -14 19:24:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) [ 545.158803][T20916] FAT-fs (loop2): Unrecognized mount option "fsuuid=f4g}" or missing value 19:24:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) [ 545.249864][T20926] binder: 20923:20926 transaction failed 29189/-22, size 24-0 line 2903 [ 545.287296][T20926] binder: 20923:20926 ioctl c0306201 20000440 returned -14 19:24:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a0") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) 19:24:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a0") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) [ 545.465439][T20938] binder: 20937:20938 transaction failed 29189/-22, size 24-0 line 2903 [ 545.475842][T20938] binder: 20937:20938 ioctl c0306201 20000440 returned -14 19:24:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r3 = accept4(r2, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r3, 0x4, 0x2000) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') r5 = syz_open_dev$amidi(&(0x7f0000000640)='/dev/amidi#\x00', 0x3, 0x0) sendfile(r3, r4, 0x0, 0x10000000000443) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r3, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r3, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000740), 0x4) bind$xdp(r4, &(0x7f0000000380)={0x2c, 0x1, 0x0, 0x33}, 0x10) syz_open_dev$sndctrl(0x0, 0x0, 0x640801) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) r7 = dup(r1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40042409, 0x0) 19:24:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a0") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) 19:24:35 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x400, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0xfec7) mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r2, 0x0, 0x1) 19:24:35 executing program 2: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) r2 = syz_open_dev$swradio(&(0x7f00000002c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$RTC_UIE_ON(r2, 0x7003) io_setup(0x9, &(0x7f0000000040)=0x0) io_cancel(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x41cc, r0, &(0x7f0000000140)="70c919527bea781efe759260f9bb556a4e4d85867b95411b679a1acbd14575268447beab30d10a641aa674360609aa905f97a582ce8902c3621a6bdddc33a2f6526333df794c2ed15782efcd056f95bdbd08a43ef0bca64ed25f5c1d40e1f619b35ba26abb262fe13f5cdee332d06c6ec4c29e51025a289a630bc5970836af600207d3c61763cf4609e77fa7da9132a986550634f4d38a16fce5dfd0c7f2029b394bff68cf51f817cd2f8acfb4ce5cc4f165faa63d91a2f73372195e0960f350", 0xc0, 0x609f7e83, 0x0, 0x0, r0}, &(0x7f0000000280)) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:24:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0xf0ffffff00000000}}], 0x1, 0x0, 0x0) [ 545.977196][T20956] QAT: Invalid ioctl [ 545.983665][T20959] binder: 20950:20959 ioctl c0306201 20000440 returned -14 19:24:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) 19:24:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) [ 546.160561][T20972] binder: 20971:20972 ioctl c0306201 20000440 returned -14 19:24:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) [ 546.271535][T20980] binder: 20979:20980 ioctl c0306201 20000440 returned -14 [ 546.294065][T20956] QAT: Invalid ioctl 19:24:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 546.393561][T20987] binder: 20986:20987 ioctl c0306201 20000440 returned -14 19:24:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r3 = accept4(r2, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r3, 0x4, 0x2000) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') r5 = syz_open_dev$amidi(&(0x7f0000000640)='/dev/amidi#\x00', 0x3, 0x0) sendfile(r3, r4, 0x0, 0x10000000000443) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r3, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r3, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000740), 0x4) bind$xdp(r4, &(0x7f0000000380)={0x2c, 0x1, 0x0, 0x33}, 0x10) syz_open_dev$sndctrl(0x0, 0x0, 0x640801) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) r7 = dup(r1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40042409, 0x0) 19:24:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) 19:24:36 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x1) 19:24:36 executing program 2: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) r2 = syz_open_dev$swradio(&(0x7f00000002c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$RTC_UIE_ON(r2, 0x7003) io_setup(0x9, &(0x7f0000000040)=0x0) io_cancel(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x41cc, r0, &(0x7f0000000140)="70c919527bea781efe759260f9bb556a4e4d85867b95411b679a1acbd14575268447beab30d10a641aa674360609aa905f97a582ce8902c3621a6bdddc33a2f6526333df794c2ed15782efcd056f95bdbd08a43ef0bca64ed25f5c1d40e1f619b35ba26abb262fe13f5cdee332d06c6ec4c29e51025a289a630bc5970836af600207d3c61763cf4609e77fa7da9132a986550634f4d38a16fce5dfd0c7f2029b394bff68cf51f817cd2f8acfb4ce5cc4f165faa63d91a2f73372195e0960f350", 0xc0, 0x609f7e83, 0x0, 0x0, r0}, &(0x7f0000000280)) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:24:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0xf500000000000000}}], 0x1, 0x0, 0x0) [ 546.872758][T20995] binder: 20994:20995 ioctl c0306201 20000440 returned -14 19:24:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) 19:24:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) [ 547.099842][T21019] binder: 21017:21019 ioctl c0306201 20000440 returned -14 19:24:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) 19:24:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f5e0ff, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) [ 547.280017][T21030] binder: 21029:21030 ioctl c0306201 20000440 returned -14 [ 547.296689][T21030] binder: 21029:21030 ioctl c0306201 20000440 returned -14 19:24:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r3 = accept4(r2, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r3, 0x4, 0x2000) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') r5 = syz_open_dev$amidi(&(0x7f0000000640)='/dev/amidi#\x00', 0x3, 0x0) sendfile(r3, r4, 0x0, 0x10000000000443) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r3, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r3, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000740), 0x4) bind$xdp(r4, &(0x7f0000000380)={0x2c, 0x1, 0x0, 0x33}, 0x10) syz_open_dev$sndctrl(0x0, 0x0, 0x640801) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) r7 = dup(r1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40042409, 0x0) 19:24:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:37 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0x400}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x1) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8000000000000004) 19:24:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) [ 547.790211][T21043] binder: 21040:21043 ioctl c0306201 20000440 returned -14 19:24:37 executing program 2: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) r2 = syz_open_dev$swradio(&(0x7f00000002c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$RTC_UIE_ON(r2, 0x7003) io_setup(0x9, &(0x7f0000000040)=0x0) io_cancel(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x41cc, r0, &(0x7f0000000140)="70c919527bea781efe759260f9bb556a4e4d85867b95411b679a1acbd14575268447beab30d10a641aa674360609aa905f97a582ce8902c3621a6bdddc33a2f6526333df794c2ed15782efcd056f95bdbd08a43ef0bca64ed25f5c1d40e1f619b35ba26abb262fe13f5cdee332d06c6ec4c29e51025a289a630bc5970836af600207d3c61763cf4609e77fa7da9132a986550634f4d38a16fce5dfd0c7f2029b394bff68cf51f817cd2f8acfb4ce5cc4f165faa63d91a2f73372195e0960f350", 0xc0, 0x609f7e83, 0x0, 0x0, r0}, &(0x7f0000000280)) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:24:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0xff01000000000000}}], 0x1, 0x0, 0x0) 19:24:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r1, 0x0, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) [ 547.955949][T21054] binder: 21053:21054 ioctl c0306201 20000440 returned -14 19:24:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r1, 0x0, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) 19:24:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x5, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r1, 0x0, &(0x7f00000000c0)={'team0\x00', @ifru_hwaddr=@broadcast}) [ 548.127514][T21070] binder: 21066:21070 ioctl c0306201 20000440 returned -14 [ 548.245402][T21078] binder: 21076:21078 ioctl c0306201 20000440 returned -14 19:24:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r3 = accept4(r2, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r3, 0x4, 0x2000) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') r5 = syz_open_dev$amidi(&(0x7f0000000640)='/dev/amidi#\x00', 0x3, 0x0) sendfile(r3, r4, 0x0, 0x10000000000443) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r3, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r3, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000740), 0x4) bind$xdp(r4, &(0x7f0000000380)={0x2c, 0x1, 0x0, 0x33}, 0x10) syz_open_dev$sndctrl(0x0, 0x0, 0x640801) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) dup(r1) preadv(r6, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) 19:24:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r1, 0x8914, 0x0) 19:24:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x6, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:38 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') prctl$PR_GET_NO_NEW_PRIVS(0x27) sendfile(r0, r1, 0x0, 0x1) [ 548.717964][T21087] binder_transaction: 12 callbacks suppressed [ 548.717973][T21087] binder: 21083:21087 transaction failed 29189/-22, size 24-6 line 2903 [ 548.763467][T21087] binder: 21083:21087 ioctl c0306201 20000440 returned -14 19:24:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r3 = accept4(r2, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r3, 0x4, 0x2000) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') r5 = syz_open_dev$amidi(&(0x7f0000000640)='/dev/amidi#\x00', 0x3, 0x0) sendfile(r3, r4, 0x0, 0x10000000000443) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r3, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r3, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000740), 0x4) bind$xdp(r4, &(0x7f0000000380)={0x2c, 0x1, 0x0, 0x33}, 0x10) syz_open_dev$sndctrl(0x0, 0x0, 0x640801) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) r7 = dup(r1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40042409, 0x0) 19:24:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r1, 0x8914, 0x0) 19:24:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0xffffffff00000000}}], 0x1, 0x0, 0x0) 19:24:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x7, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r1, 0x8914, 0x0) [ 548.999978][T21100] binder: 21098:21100 transaction failed 29189/-22, size 24-7 line 2903 [ 549.095071][T21100] binder: 21098:21100 ioctl c0306201 20000440 returned -14 19:24:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0xa, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 549.206930][T21115] binder: 21112:21115 transaction failed 29189/-22, size 24-10 line 2903 [ 549.220555][T21118] binder: 21116:21118 transaction failed 29189/-22, size 24-0 line 2903 [ 549.230736][T21115] binder: 21112:21115 ioctl c0306201 20000440 returned -14 [ 549.247322][T21118] binder: 21116:21118 ioctl c0306201 20000440 returned -14 19:24:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x12, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 549.391977][T21223] binder: 21222:21223 transaction failed 29189/-22, size 24-18 line 2903 [ 549.416148][T21223] binder: 21222:21223 ioctl c0306201 20000440 returned -14 19:24:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2000) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') r4 = syz_open_dev$amidi(&(0x7f0000000640)='/dev/amidi#\x00', 0x3, 0x0) sendfile(r2, r3, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000740), 0x4) bind$xdp(r3, &(0x7f0000000380)={0x2c, 0x1, 0x0, 0x33}, 0x10) syz_open_dev$sndctrl(0x0, 0x0, 0x640801) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r5, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) 19:24:39 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0xf, 0x102, 0x1, {0x8, 0x7f, 0x1, 0x3}}) getpeername$netlink(r1, &(0x7f0000000140), &(0x7f0000000180)=0xc) socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:24:39 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x1) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000040)) 19:24:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r3 = accept4(r2, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r3, 0x4, 0x2000) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') r5 = syz_open_dev$amidi(&(0x7f0000000640)='/dev/amidi#\x00', 0x3, 0x0) sendfile(r3, r4, 0x0, 0x10000000000443) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r3, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r3, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000740), 0x4) bind$xdp(r4, &(0x7f0000000380)={0x2c, 0x1, 0x0, 0x33}, 0x10) syz_open_dev$sndctrl(0x0, 0x0, 0x640801) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) r7 = dup(r1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40042409, 0x0) 19:24:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x48, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 549.642505][T21233] binder: 21231:21233 transaction failed 29189/-22, size 24-72 line 2903 [ 549.667230][T21233] binder: 21231:21233 ioctl c0306201 20000440 returned -14 19:24:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4c, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x2}}], 0x1, 0x0, 0x0) [ 549.808430][T21244] binder: 21243:21244 transaction failed 29189/-22, size 24-76 line 2903 [ 549.830362][T21244] binder: 21243:21244 ioctl c0306201 20000440 returned -14 19:24:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x68, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 550.003866][T21355] binder: 21353:21355 transaction failed 29189/-22, size 24-104 line 2903 [ 550.049435][T21355] binder: 21353:21355 ioctl c0306201 20000440 returned -14 19:24:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x6c, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:40 executing program 2: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) seccomp(0x1, 0x0, &(0x7f0000000040)={0xa, &(0x7f0000000140)=[{0x800, 0x5, 0x5ccc, 0x10000}, {0x1ff, 0x23, 0x128, 0x1ff}, {0xf192, 0x6, 0x1, 0x9}, {0x1, 0x7, 0x27e2, 0x5}, {0x4, 0x800, 0x1, 0xc2d3}, {0x5, 0x3, 0x85a2, 0x1}, {0x8, 0x2, 0x17bbd17, 0x5}, {0x80000001, 0x0, 0x4, 0x3ff}, {0x582, 0x88f, 0x6d2, 0x7}, {0x9, 0x9, 0x100000000, 0xfffffffffffffff8}]}) bind$alg(0xffffffffffffffff, 0x0, 0x0) [ 550.181065][T21359] binder: 21358:21359 transaction failed 29189/-22, size 24-108 line 2903 [ 550.216878][T21359] binder: 21358:21359 ioctl c0306201 20000440 returned -14 19:24:40 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sched\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x1) 19:24:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x74, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 550.393264][T21370] binder: 21369:21370 transaction failed 29189/-22, size 24-116 line 2903 [ 550.414406][T21370] binder: 21369:21370 ioctl c0306201 20000440 returned -14 19:24:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2000) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') r4 = syz_open_dev$amidi(&(0x7f0000000640)='/dev/amidi#\x00', 0x3, 0x0) sendfile(r2, r3, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000740), 0x4) bind$xdp(r3, &(0x7f0000000380)={0x2c, 0x1, 0x0, 0x33}, 0x10) syz_open_dev$sndctrl(0x0, 0x0, 0x640801) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r5, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) 19:24:40 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0xf, 0x102, 0x1, {0x8, 0x7f, 0x1, 0x3}}) getpeername$netlink(r1, &(0x7f0000000140), &(0x7f0000000180)=0xc) socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:24:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x7a, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 550.568979][T21376] binder: 21374:21376 ioctl c0306201 20000440 returned -14 19:24:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x300, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x8}}], 0x1, 0x0, 0x0) 19:24:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x500, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 550.776164][T21392] binder: 21390:21392 ioctl c0306201 20000440 returned -14 19:24:40 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000080)) sendfile(r0, r1, 0x0, 0x1) accept4$llc(r1, 0x0, &(0x7f0000000040), 0x80800) [ 550.867720][T21396] binder: 21395:21396 ioctl c0306201 20000440 returned -14 19:24:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x600, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x700, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 551.003825][T21402] binder: 21401:21402 ioctl c0306201 20000440 returned -14 19:24:41 executing program 2: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) bind$alg(0xffffffffffffffff, 0x0, 0x0) [ 551.090798][T21405] binder: 21404:21405 ioctl c0306201 20000440 returned -14 19:24:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0xa00, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x1200, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 551.230868][T21413] binder: 21411:21413 ioctl c0306201 20000440 returned -14 [ 551.296958][T21418] binder: 21417:21418 ioctl c0306201 20000440 returned -14 19:24:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2000) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') r4 = syz_open_dev$amidi(&(0x7f0000000640)='/dev/amidi#\x00', 0x3, 0x0) sendfile(r2, r3, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000740), 0x4) bind$xdp(r3, &(0x7f0000000380)={0x2c, 0x1, 0x0, 0x33}, 0x10) syz_open_dev$sndctrl(0x0, 0x0, 0x640801) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x200000000005002}) preadv(r5, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) 19:24:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4800, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:41 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0xf, 0x102, 0x1, {0x8, 0x7f, 0x1, 0x3}}) getpeername$netlink(r1, &(0x7f0000000140), &(0x7f0000000180)=0xc) socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 19:24:41 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') getsockopt$sock_int(r0, 0x1, 0x3f, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendfile(r0, r1, 0x0, 0x1) [ 551.514095][T21428] binder: 21424:21428 ioctl c0306201 20000440 returned -14 19:24:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x10}}], 0x1, 0x0, 0x0) 19:24:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4c00, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 551.633320][T21436] binder: 21435:21436 ioctl c0306201 20000440 returned -14 19:24:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x6800, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x6c00, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 551.799730][T21445] binder: 21444:21445 ioctl c0306201 20000440 returned -14 19:24:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x7400, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 551.873302][T21449] binder: 21448:21449 ioctl c0306201 20000440 returned -14 19:24:41 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000240)={0x2, 0x0, [], {0x0, @reserved}}) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf10001, 0xeffffdef) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x80000001}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={r4, 0x8}, &(0x7f00000001c0)=0x8) close(r2) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) [ 551.949637][T21452] binder: 21451:21452 ioctl c0306201 20000440 returned -14 19:24:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x7a00, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x1000000, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 552.070174][T21460] binder: 21459:21460 ioctl c0306201 20000440 returned -14 [ 552.146236][T21465] binder: 21463:21465 ioctl c0306201 20000440 returned -14 19:24:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2000) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') r4 = syz_open_dev$amidi(&(0x7f0000000640)='/dev/amidi#\x00', 0x3, 0x0) sendfile(r2, r3, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000740), 0x4) bind$xdp(r3, &(0x7f0000000380)={0x2c, 0x1, 0x0, 0x33}, 0x10) syz_open_dev$sndctrl(0x0, 0x0, 0x640801) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) 19:24:42 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') setsockopt$inet6_tcp_int(r1, 0x6, 0x17, &(0x7f0000000040)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x1) 19:24:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2000000, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:42 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0xf, 0x102, 0x1, {0x8, 0x7f, 0x1, 0x3}}) getpeername$netlink(r1, &(0x7f0000000140), &(0x7f0000000180)=0xc) socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) [ 552.410649][T21475] binder: 21469:21475 ioctl c0306201 20000440 returned -14 19:24:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0xf5}}], 0x1, 0x0, 0x0) 19:24:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3000000, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4000000, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 552.553011][T21481] binder: 21480:21481 ioctl c0306201 20000440 returned -14 [ 552.646232][T21490] binder: 21488:21490 ioctl c0306201 20000440 returned -14 19:24:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x5000000, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2000) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') r4 = syz_open_dev$amidi(&(0x7f0000000640)='/dev/amidi#\x00', 0x3, 0x0) sendfile(r2, r3, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000740), 0x4) bind$xdp(r3, &(0x7f0000000380)={0x2c, 0x1, 0x0, 0x33}, 0x10) syz_open_dev$sndctrl(0x0, 0x0, 0x640801) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) 19:24:42 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000240)={0x2, 0x0, [], {0x0, @reserved}}) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf10001, 0xeffffdef) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x80000001}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={r4, 0x8}, &(0x7f00000001c0)=0x8) close(r2) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) [ 552.788767][T21498] binder: 21497:21498 ioctl c0306201 20000440 returned -14 [ 552.844219][T21498] binder: 21497:21498 ioctl c0306201 20000440 returned -14 19:24:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x6000000, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 552.961837][T21509] binder: 21508:21509 ioctl c0306201 20000440 returned -14 [ 552.975485][T21509] binder: 21508:21509 ioctl c0306201 20000440 returned -14 19:24:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x7000000, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:43 executing program 4: r0 = open(&(0x7f0000000040)='./file0\x00', 0x800, 0x1c2) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000080)={0x0, {0x2, 0x4e22, @rand_addr=0xfffffffffffff9ee}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}, {0x2, 0x4e24, @remote}, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x100000001, 0x80}) write$UHID_CREATE2(r0, &(0x7f00000011c0)={0xb, 'syz0\x00', 'syz1\x00', 'syz1\x00', 0xef, 0x3, 0xff, 0x1, 0x3, 0x1000, "45899d2a88ad438a1288f275c6d322341e5c16092a3adbdefa3540df4b0ab0fcc23f7d039d864f315d9da685c147c94819864026698e65e1b6925fd682079fd32f60226d9c5bfebf1c1bb23099311976d699dea4bf1dd83ec36e02fe8e87944bb91c435bd7cf1bf8a6d450ebd45a988855a6363e1c6ded032057329adccc131a108eb438150d45324458634bfcfd3425386f0e199b84ad72536aed3aca37349c0b105bb7135e631b17c846b411e23c25ecd03d0a2e0996026c6cca1bcb8d29bf61387a4df516bfbc3af5bd9093e7506e4b10fb0509e87adb13dac11ebedb8f8b45d8a9245ac002a394634564d15a01"}, 0x207) mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r1, r2, 0x0, 0x1) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f00000001c0)=""/4096) 19:24:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0xa000000, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 553.077367][T21514] binder: 21513:21514 ioctl c0306201 20000440 returned -14 19:24:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x12000000, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 553.128863][T21518] binder: 21517:21518 ioctl c0306201 20000440 returned -14 19:24:43 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0xf, 0x102, 0x1, {0x8, 0x7f, 0x1, 0x3}}) getpeername$netlink(r1, &(0x7f0000000140), &(0x7f0000000180)=0xc) socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) [ 553.254384][T21522] binder: 21521:21522 ioctl c0306201 20000440 returned -14 [ 553.278125][T21522] binder: 21521:21522 ioctl c0306201 20000440 returned -14 19:24:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x3f00}}], 0x1, 0x0, 0x0) 19:24:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x48000000, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4c000000, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 553.471487][T21535] binder: 21533:21535 ioctl c0306201 20000440 returned -14 19:24:43 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x1) 19:24:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2000) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') r4 = syz_open_dev$amidi(&(0x7f0000000640)='/dev/amidi#\x00', 0x3, 0x0) sendfile(r2, r3, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000740), 0x4) bind$xdp(r3, &(0x7f0000000380)={0x2c, 0x1, 0x0, 0x33}, 0x10) syz_open_dev$sndctrl(0x0, 0x0, 0x640801) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) 19:24:43 executing program 2: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0xf, 0x102, 0x1, {0x8, 0x7f, 0x1, 0x3}}) getpeername$netlink(r1, &(0x7f0000000140), &(0x7f0000000180)=0xc) socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) [ 553.618962][T21543] binder: 21541:21543 ioctl c0306201 20000440 returned -14 19:24:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x68000000, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 553.772258][T21555] binder_transaction: 27 callbacks suppressed [ 553.772274][T21555] binder: 21554:21555 transaction failed 29189/-22, size 24-1744830464 line 2903 19:24:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x6c000000, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 553.833201][T21555] binder: 21554:21555 ioctl c0306201 20000440 returned -14 [ 553.849912][T21555] binder: 21554:21555 transaction failed 29189/-22, size 24-1744830464 line 2903 [ 553.859876][T21555] binder: 21554:21555 ioctl c0306201 20000440 returned -14 19:24:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2000) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') syz_open_dev$amidi(&(0x7f0000000640)='/dev/amidi#\x00', 0x3, 0x0) sendfile(r2, r3, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000740), 0x4) bind$xdp(r3, &(0x7f0000000380)={0x2c, 0x1, 0x0, 0x33}, 0x10) syz_open_dev$sndctrl(0x0, 0x0, 0x640801) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) [ 553.959255][T21562] binder: 21561:21562 transaction failed 29189/-22, size 24-1811939328 line 2903 [ 553.972984][T21562] binder: 21561:21562 ioctl c0306201 20000440 returned -14 [ 553.997902][T21562] binder: 21561:21562 transaction failed 29189/-22, size 24-1811939328 line 2903 19:24:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x74000000, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 554.017053][T21562] binder: 21561:21562 ioctl c0306201 20000440 returned -14 19:24:44 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0xf, 0x102, 0x1, {0x8, 0x7f, 0x1, 0x3}}) getpeername$netlink(r1, &(0x7f0000000140), &(0x7f0000000180)=0xc) socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) [ 554.109807][T21568] binder: 21567:21568 transaction failed 29189/-22, size 24-1946157056 line 2903 [ 554.134618][T21568] binder: 21567:21568 ioctl c0306201 20000440 returned -14 19:24:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x7a000000, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 554.265236][T21577] binder: 21576:21577 transaction failed 29189/-22, size 24-2046820352 line 2903 [ 554.277446][T21577] binder: 21576:21577 ioctl c0306201 20000440 returned -14 19:24:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x4000}}], 0x1, 0x0, 0x0) 19:24:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2000) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') syz_open_dev$amidi(&(0x7f0000000640)='/dev/amidi#\x00', 0x3, 0x0) sendfile(r2, r3, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000740), 0x4) bind$xdp(r3, &(0x7f0000000380)={0x2c, 0x1, 0x0, 0x33}, 0x10) syz_open_dev$sndctrl(0x0, 0x0, 0x640801) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) 19:24:44 executing program 4: mlockall(0x8000000000000001) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000040)={'team_slave_0\x00', {0x2, 0x4e23, @multicast2}}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x1) [ 554.332674][T21577] binder: 21576:21577 transaction failed 29189/-22, size 24-2046820352 line 2903 [ 554.399357][T21577] binder: 21576:21577 ioctl c0306201 20000440 returned -14 19:24:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x100000000000000, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:44 executing program 2: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0xf, 0x102, 0x1, {0x8, 0x7f, 0x1, 0x3}}) getpeername$netlink(r1, &(0x7f0000000140), &(0x7f0000000180)=0xc) socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) [ 554.533585][T21593] binder: 21591:21593 transaction failed 29189/-22, size 24-72057594037927936 line 2903 [ 554.548822][T21593] binder: 21591:21593 ioctl c0306201 20000440 returned -14 19:24:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x200000000000000, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x300000000000000, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 554.703844][T21603] binder: 21602:21603 transaction failed 29189/-22, size 24-144115188075855872 line 2903 [ 554.714058][T21603] binder: 21602:21603 ioctl c0306201 20000440 returned -14 19:24:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x400000000000000, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 554.790922][T21607] binder: 21606:21607 transaction failed 29189/-22, size 24-216172782113783808 line 2903 [ 554.801335][T21607] binder: 21606:21607 ioctl c0306201 20000440 returned -14 19:24:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x500000000000000, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:44 executing program 4: mlockall(0x8000000000000001) r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x3, 0x2000) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x2, 0x8, [0x1f, 0x0, 0xc95c, 0x9, 0x20, 0xa1c, 0x401, 0x0]}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={r1, 0x1}, &(0x7f0000000140)=0x8) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') syz_open_pts(r2, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000001c0)) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000200)={0x9, 0x2, 0x3, 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r2, r3, 0x0, 0x1) [ 554.861195][T21610] binder: 21609:21610 ioctl c0306201 20000440 returned -14 [ 554.880076][T21610] binder: 21609:21610 ioctl c0306201 20000440 returned -14 [ 554.972419][T21616] binder: 21615:21616 ioctl c0306201 20000440 returned -14 19:24:45 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0xf, 0x102, 0x1, {0x8, 0x7f, 0x1, 0x3}}) getpeername$netlink(r1, &(0x7f0000000140), &(0x7f0000000180)=0xc) socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) 19:24:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x600000000000000, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 555.066878][T21620] binder: 21619:21620 ioctl c0306201 20000440 returned -14 19:24:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0xf500}}], 0x1, 0x0, 0x0) 19:24:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x700000000000000, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2000) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') syz_open_dev$amidi(&(0x7f0000000640)='/dev/amidi#\x00', 0x3, 0x0) sendfile(r2, r3, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000740), 0x4) bind$xdp(r3, &(0x7f0000000380)={0x2c, 0x1, 0x0, 0x33}, 0x10) syz_open_dev$sndctrl(0x0, 0x0, 0x640801) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) [ 555.263214][T21631] binder: 21630:21631 ioctl c0306201 20000440 returned -14 [ 555.294990][T21631] binder: 21630:21631 ioctl c0306201 20000440 returned -14 19:24:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0xa00000000000000, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:45 executing program 2: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0xf, 0x102, 0x1, {0x8, 0x7f, 0x1, 0x3}}) getpeername$netlink(r1, &(0x7f0000000140), &(0x7f0000000180)=0xc) socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) 19:24:45 executing program 4: mlockall(0x8000000000000001) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = accept(0xffffffffffffff9c, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000280)=0x80) r2 = socket$inet6(0xa, 0x1, 0x5) ppoll(&(0x7f00000002c0)=[{r0, 0x80}, {r1, 0x2}, {r2, 0x3401}], 0x3, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340)={0xb0}, 0x8) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f00000001c0)=0x3) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x402, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000081}, 0x800) sync_file_range(r4, 0x91f, 0x3, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000003c0)={0x0, 0x1, 0x10}, &(0x7f0000000400)=0xc) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000440)={r6, @in={{0x2, 0x4e24, @rand_addr=0x7}}, 0xfffffffffffffffa, 0x7}, 0x90) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000380)=0x7) sendfile(r3, r4, 0x0, 0x1) [ 555.433343][T21642] binder: 21641:21642 ioctl c0306201 20000440 returned -14 19:24:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x1200000000000000, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2000) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') syz_open_dev$amidi(&(0x7f0000000640)='/dev/amidi#\x00', 0x3, 0x0) sendfile(r2, r3, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000740), 0x4) bind$xdp(r3, &(0x7f0000000380)={0x2c, 0x1, 0x0, 0x33}, 0x10) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) 19:24:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4800000000000000, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 555.586494][T21655] binder: 21653:21655 ioctl c0306201 20000440 returned -14 [ 555.607657][T21655] binder: 21653:21655 ioctl c0306201 20000440 returned -14 19:24:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4c00000000000000, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 555.702578][T21661] binder: 21660:21661 ioctl c0306201 20000440 returned -14 [ 555.712666][T21661] binder: 21660:21661 ioctl c0306201 20000440 returned -14 [ 555.801637][T21666] binder: 21665:21666 ioctl c0306201 20000440 returned -14 [ 555.817715][T21666] binder: 21665:21666 ioctl c0306201 20000440 returned -14 19:24:45 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0xf, 0x102, 0x1, {0x8, 0x7f, 0x1, 0x3}}) getpeername$netlink(r1, &(0x7f0000000140), &(0x7f0000000180)=0xc) socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) 19:24:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2000) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') syz_open_dev$amidi(&(0x7f0000000640)='/dev/amidi#\x00', 0x3, 0x0) sendfile(r2, r3, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000740), 0x4) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) 19:24:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0xff01}}], 0x1, 0x0, 0x0) 19:24:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x6800000000000000, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2000) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') syz_open_dev$amidi(&(0x7f0000000640)='/dev/amidi#\x00', 0x3, 0x0) sendfile(r2, r3, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) 19:24:46 executing program 4: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0xf, 0x102, 0x1, {0x8, 0x7f, 0x1, 0x3}}) getpeername$netlink(r1, &(0x7f0000000140), &(0x7f0000000180)=0xc) socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) [ 556.129450][T21688] binder: 21687:21688 ioctl c0306201 20000440 returned -14 19:24:46 executing program 2: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0xf, 0x102, 0x1, {0x8, 0x7f, 0x1, 0x3}}) getpeername$netlink(r1, &(0x7f0000000140), &(0x7f0000000180)=0xc) socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) 19:24:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x6c00000000000000, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 556.322859][T21704] binder: 21701:21704 ioctl c0306201 20000440 returned -14 19:24:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x7400000000000000, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x7a00000000000000, &(0x7f0000000200)=[@flat], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2000) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') syz_open_dev$amidi(&(0x7f0000000640)='/dev/amidi#\x00', 0x3, 0x0) sendfile(r2, r3, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) [ 556.430488][T21713] binder: 21712:21713 ioctl c0306201 20000440 returned -14 19:24:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x2}], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 556.525521][T21717] binder: 21716:21717 ioctl c0306201 20000440 returned -14 [ 556.553556][T21717] binder: 21716:21717 ioctl c0306201 20000440 returned -14 [ 556.610302][T21722] binder: 21721:21722 ioctl c0306201 20000440 returned -14 [ 556.639743][T21722] binder: 21721:21722 ioctl c0306201 20000440 returned -14 19:24:46 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0xf, 0x102, 0x1, {0x8, 0x7f, 0x1, 0x3}}) getpeername$netlink(r1, &(0x7f0000000140), &(0x7f0000000180)=0xc) socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) 19:24:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x3}], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 556.773574][T21730] binder: 21729:21730 ioctl c0306201 20000440 returned -14 [ 556.782311][T21730] binder: 21729:21730 ioctl c0306201 20000440 returned -14 19:24:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x100000}}], 0x1, 0x0, 0x0) 19:24:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x4}], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x5}], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 556.974160][T21737] binder: 21736:21737 ioctl c0306201 20000440 returned -14 [ 557.006895][T21737] binder: 21736:21737 ioctl c0306201 20000440 returned -14 19:24:47 executing program 4: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0xf, 0x102, 0x1, {0x8, 0x7f, 0x1, 0x3}}) getpeername$netlink(r1, &(0x7f0000000140), &(0x7f0000000180)=0xc) socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) [ 557.072147][T21743] binder: 21742:21743 ioctl c0306201 20000440 returned -14 19:24:47 executing program 2: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xfffffffffffffffe, 0x0, 0xffffffffffffff51) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x3, 0x5, 0x400, 0x6}, &(0x7f0000000040)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x8, 0x0, 0x1, 0x6, 0x7, 0x5, 0x1000, 0x8000, r2}, 0x20) 19:24:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x6}], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 557.186538][T21752] binder: 21750:21752 ioctl c0306201 20000440 returned -14 19:24:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x7}], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0xa}], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 557.277012][T21759] binder: 21758:21759 ioctl c0306201 20000440 returned -14 [ 557.292138][T21759] binder: 21758:21759 ioctl c0306201 20000440 returned -14 19:24:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2000) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') syz_open_dev$amidi(&(0x7f0000000640)='/dev/amidi#\x00', 0x3, 0x0) sendfile(r2, r3, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) 19:24:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x12}], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 557.355619][T21763] binder: 21762:21763 ioctl c0306201 20000440 returned -14 [ 557.444068][T21769] binder: 21768:21769 ioctl c0306201 20000440 returned -14 19:24:47 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0xf, 0x102, 0x1, {0x8, 0x7f, 0x1, 0x3}}) getpeername$netlink(r1, &(0x7f0000000140), &(0x7f0000000180)=0xc) socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) 19:24:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x48}], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 557.603725][T21774] binder: 21773:21774 ioctl c0306201 20000440 returned -14 [ 557.627736][T21774] binder: 21773:21774 ioctl c0306201 20000440 returned -14 19:24:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x1000000}}], 0x1, 0x0, 0x0) 19:24:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x4c}], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x68}], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 557.836951][T21783] binder: 21782:21783 ioctl c0306201 20000440 returned -14 19:24:47 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x6800, 0x0, 0x0, 0x54}, 0x98) [ 557.932857][T21790] binder: 21789:21790 ioctl c0306201 20000440 returned -14 19:24:48 executing program 2: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/237) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xfffffffffffffffe, 0x0, 0xffffffffffffff51) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x3, 0x5, 0x400, 0x6}, &(0x7f0000000040)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x8, 0x0, 0x1, 0x6, 0x7, 0x5, 0x1000, 0x8000, r2}, 0x20) 19:24:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x6c}], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x74}], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 558.073567][T21798] binder: 21797:21798 ioctl c0306201 20000440 returned -14 [ 558.082597][T21798] binder: 21797:21798 ioctl c0306201 20000440 returned -14 [ 558.151718][T21805] binder: 21804:21805 ioctl c0306201 20000440 returned -14 19:24:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x7a}], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2000) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') syz_open_dev$amidi(&(0x7f0000000640)='/dev/amidi#\x00', 0x3, 0x0) sendfile(r2, r3, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) 19:24:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x300}], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 558.227138][T21808] binder: 21807:21808 ioctl c0306201 20000440 returned -14 19:24:48 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0xf, 0x102, 0x1, {0x8, 0x7f, 0x1, 0x3}}) getpeername$netlink(r1, &(0x7f0000000140), &(0x7f0000000180)=0xc) socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) [ 558.360565][T21815] binder: 21814:21815 ioctl c0306201 20000440 returned -14 19:24:48 executing program 4: 19:24:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x2000000}}], 0x1, 0x0, 0x0) 19:24:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x500}], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:48 executing program 4: 19:24:48 executing program 4: [ 558.692251][T21832] binder: 21829:21832 ioctl c0306201 20000440 returned -14 [ 558.736741][T21832] binder: 21829:21832 ioctl c0306201 20000440 returned -14 19:24:48 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$mixer(0xffffffffffffff9c, 0x0, 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) preadv(r1, &(0x7f0000000b40)=[{&(0x7f0000000480)=""/99, 0x63}, {&(0x7f0000000680)=""/104, 0x68}, {&(0x7f0000000700)=""/144, 0x90}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f0000000a40)=""/255, 0xff}], 0x6, 0x0) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 19:24:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x600}], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:48 executing program 4: 19:24:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_timedsend(0xffffffffffffffff, &(0x7f0000000100)="73b3cafec3dbd277099115feb843043bcd21914a3dd770451ca1844af1702112de1c7734850769393d14c839755a14d817df51fee3f9c0eb552a2c2ed1587ddc4541f459edf88ac4aeb604daa86338ecf4a9ac6ff010cf7c5811", 0x5a, 0x5, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006080)=[{{&(0x7f0000000d40)=@xdp, 0x80, &(0x7f0000002040)=[{&(0x7f0000000f80)=""/90, 0x5a}], 0x1}}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 558.833644][T21842] binder_transaction: 41 callbacks suppressed [ 558.833661][T21842] binder: 21841:21842 transaction failed 29189/-22, size 24-0 line 2903 [ 558.863083][T21842] binder: 21841:21842 ioctl c0306201 20000440 returned -14 19:24:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2000) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') syz_open_dev$amidi(&(0x7f0000000640)='/dev/amidi#\x00', 0x3, 0x0) sendfile(r2, r3, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) 19:24:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x700}], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 559.158535][T21855] binder: 21854:21855 transaction failed 29189/-22, size 24-0 line 2903 [ 559.172588][T21855] binder: 21854:21855 ioctl c0306201 20000440 returned -14 [ 559.181298][T21855] binder: 21854:21855 transaction failed 29189/-22, size 24-0 line 2903 [ 559.232220][T21855] binder: 21854:21855 ioctl c0306201 20000440 returned -14 19:24:49 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0xf, 0x102, 0x1, {0x8, 0x7f, 0x1, 0x3}}) getpeername$netlink(r1, &(0x7f0000000140), &(0x7f0000000180)=0xc) socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) 19:24:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3a) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ptrace$cont(0x1f, r1, 0x0, 0x8) 19:24:49 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 19:24:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0xa00}], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:49 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$mixer(0xffffffffffffff9c, 0x0, 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) preadv(r1, &(0x7f0000000b40)=[{&(0x7f0000000480)=""/99, 0x63}, {&(0x7f0000000680)=""/104, 0x68}, {&(0x7f0000000700)=""/144, 0x90}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f0000000a40)=""/255, 0xff}], 0x6, 0x0) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 19:24:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x8000000}}], 0x1, 0x0, 0x0) 19:24:49 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0xf, 0x102, 0x1, {0x8, 0x7f, 0x1, 0x3}}) getpeername$netlink(r1, &(0x7f0000000140), &(0x7f0000000180)=0xc) socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) [ 559.540899][T21981] binder: 21980:21981 transaction failed 29189/-22, size 24-0 line 2903 [ 559.559118][T21981] binder: 21980:21981 ioctl c0306201 20000440 returned -14 19:24:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x1200}], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:49 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0xf, 0x102, 0x1, {0x8, 0x7f, 0x1, 0x3}}) getpeername$netlink(r1, &(0x7f0000000140), &(0x7f0000000180)=0xc) socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) 19:24:49 executing program 4: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$mixer(0xffffffffffffff9c, 0x0, 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) preadv(r1, &(0x7f0000000b40)=[{&(0x7f0000000480)=""/99, 0x63}, {&(0x7f0000000680)=""/104, 0x68}, {&(0x7f0000000700)=""/144, 0x90}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f0000000a40)=""/255, 0xff}], 0x6, 0x0) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) [ 559.675033][T21992] binder: 21990:21992 transaction failed 29189/-22, size 24-0 line 2903 [ 559.717204][T21992] binder: 21990:21992 ioctl c0306201 20000440 returned -14 19:24:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2000) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') syz_open_dev$amidi(&(0x7f0000000640)='/dev/amidi#\x00', 0x3, 0x0) sendfile(r2, r3, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) 19:24:50 executing program 4: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$mixer(0xffffffffffffff9c, 0x0, 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) preadv(r1, &(0x7f0000000b40)=[{&(0x7f0000000480)=""/99, 0x63}, {&(0x7f0000000680)=""/104, 0x68}, {&(0x7f0000000700)=""/144, 0x90}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f0000000a40)=""/255, 0xff}], 0x6, 0x0) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 19:24:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x4800}], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:50 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0xf, 0x102, 0x1, {0x8, 0x7f, 0x1, 0x3}}) getpeername$netlink(r1, &(0x7f0000000140), &(0x7f0000000180)=0xc) socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1000000) sendfile(r1, 0xffffffffffffffff, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) 19:24:50 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$mixer(0xffffffffffffff9c, 0x0, 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) preadv(r1, &(0x7f0000000b40)=[{&(0x7f0000000480)=""/99, 0x63}, {&(0x7f0000000680)=""/104, 0x68}, {&(0x7f0000000700)=""/144, 0x90}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f0000000a40)=""/255, 0xff}], 0x6, 0x0) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) [ 560.144593][T22009] binder: 22007:22009 transaction failed 29189/-22, size 24-0 line 2903 19:24:50 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0xf, 0x102, 0x1, {0x8, 0x7f, 0x1, 0x3}}) getpeername$netlink(r1, &(0x7f0000000140), &(0x7f0000000180)=0xc) socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1000000) sendfile(r1, 0xffffffffffffffff, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) [ 560.196863][T22009] binder: 22007:22009 ioctl c0306201 20000440 returned -14 19:24:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x4c00}], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:50 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0xf, 0x102, 0x1, {0x8, 0x7f, 0x1, 0x3}}) getpeername$netlink(r1, &(0x7f0000000140), &(0x7f0000000180)=0xc) socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1000000) sendfile(r1, 0xffffffffffffffff, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) 19:24:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x10000000}}], 0x1, 0x0, 0x0) 19:24:50 executing program 4: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$mixer(0xffffffffffffff9c, 0x0, 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) preadv(r1, &(0x7f0000000b40)=[{&(0x7f0000000480)=""/99, 0x63}, {&(0x7f0000000680)=""/104, 0x68}, {&(0x7f0000000700)=""/144, 0x90}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f0000000a40)=""/255, 0xff}], 0x6, 0x0) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) [ 560.421602][T22025] binder: 22023:22025 transaction failed 29189/-22, size 24-0 line 2903 19:24:50 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$mixer(0xffffffffffffff9c, 0x0, 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) preadv(r1, &(0x7f0000000b40)=[{&(0x7f0000000480)=""/99, 0x63}, {&(0x7f0000000680)=""/104, 0x68}, {&(0x7f0000000700)=""/144, 0x90}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f0000000a40)=""/255, 0xff}], 0x6, 0x0) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) [ 560.477226][T22025] binder: 22023:22025 ioctl c0306201 20000440 returned -14 19:24:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2000) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') syz_open_dev$amidi(&(0x7f0000000640)='/dev/amidi#\x00', 0x3, 0x0) sendfile(r2, r3, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) sendmsg$xdp(r2, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) 19:24:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x6800}], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:50 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0xf, 0x102, 0x1, {0x8, 0x7f, 0x1, 0x3}}) getpeername$netlink(r1, &(0x7f0000000140), &(0x7f0000000180)=0xc) socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) 19:24:50 executing program 4: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = openat$mixer(0xffffffffffffff9c, 0x0, 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) preadv(r0, &(0x7f0000000b40)=[{&(0x7f0000000480)=""/99, 0x63}, {&(0x7f0000000680)=""/104, 0x68}, {&(0x7f0000000700)=""/144, 0x90}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f0000000a40)=""/255, 0xff}], 0x6, 0x0) [ 560.778997][T22052] binder: 22049:22052 transaction failed 29189/-22, size 24-0 line 2903 [ 560.802325][T22052] binder: 22049:22052 ioctl c0306201 20000440 returned -14 19:24:50 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$mixer(0xffffffffffffff9c, 0x0, 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) preadv(r1, &(0x7f0000000b40)=[{&(0x7f0000000480)=""/99, 0x63}, {&(0x7f0000000680)=""/104, 0x68}, {&(0x7f0000000700)=""/144, 0x90}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f0000000a40)=""/255, 0xff}], 0x6, 0x0) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 19:24:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x6c00}], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:51 executing program 4: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = openat$mixer(0xffffffffffffff9c, 0x0, 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) preadv(r0, &(0x7f0000000b40)=[{&(0x7f0000000480)=""/99, 0x63}, {&(0x7f0000000680)=""/104, 0x68}, {&(0x7f0000000700)=""/144, 0x90}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f0000000a40)=""/255, 0xff}], 0x6, 0x0) [ 561.007940][T22064] binder: 22063:22064 transaction failed 29189/-22, size 24-0 line 2903 [ 561.064643][T22064] binder: 22063:22064 ioctl c0306201 20000440 returned -14 19:24:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x7400}], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:51 executing program 2: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = openat$mixer(0xffffffffffffff9c, 0x0, 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) preadv(r0, &(0x7f0000000b40)=[{&(0x7f0000000480)=""/99, 0x63}, {&(0x7f0000000680)=""/104, 0x68}, {&(0x7f0000000700)=""/144, 0x90}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f0000000a40)=""/255, 0xff}], 0x6, 0x0) [ 561.310262][T22074] binder: 22073:22074 transaction failed 29189/-22, size 24-0 line 2903 19:24:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x3f000000}}], 0x1, 0x0, 0x0) 19:24:51 executing program 4: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = openat$mixer(0xffffffffffffff9c, 0x0, 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) preadv(r0, &(0x7f0000000b40)=[{&(0x7f0000000480)=""/99, 0x63}, {&(0x7f0000000680)=""/104, 0x68}, {&(0x7f0000000700)=""/144, 0x90}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f0000000a40)=""/255, 0xff}], 0x6, 0x0) 19:24:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x7a00}], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 561.353405][T22074] binder: 22073:22074 ioctl c0306201 20000440 returned -14 19:24:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2000) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') syz_open_dev$amidi(&(0x7f0000000640)='/dev/amidi#\x00', 0x3, 0x0) sendfile(r2, r3, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) sendmsg$xdp(r2, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) 19:24:51 executing program 2: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = openat$mixer(0xffffffffffffff9c, 0x0, 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) preadv(r0, &(0x7f0000000b40)=[{&(0x7f0000000480)=""/99, 0x63}, {&(0x7f0000000680)=""/104, 0x68}, {&(0x7f0000000700)=""/144, 0x90}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f0000000a40)=""/255, 0xff}], 0x6, 0x0) [ 561.508490][T22087] binder: 22081:22087 ioctl c0306201 20000440 returned -14 19:24:51 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0xf, 0x102, 0x1, {0x8, 0x7f, 0x1, 0x3}}) getpeername$netlink(r1, &(0x7f0000000140), &(0x7f0000000180)=0xc) socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) 19:24:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x1000000}], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:51 executing program 4: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = openat$mixer(0xffffffffffffff9c, 0x0, 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 19:24:51 executing program 2: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = openat$mixer(0xffffffffffffff9c, 0x0, 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) preadv(r0, &(0x7f0000000b40)=[{&(0x7f0000000480)=""/99, 0x63}, {&(0x7f0000000680)=""/104, 0x68}, {&(0x7f0000000700)=""/144, 0x90}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f0000000a40)=""/255, 0xff}], 0x6, 0x0) [ 561.816193][T22111] binder: 22109:22111 ioctl c0306201 20000440 returned -14 19:24:51 executing program 4: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = openat$mixer(0xffffffffffffff9c, 0x0, 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 19:24:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x2000000}], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:51 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = openat$mixer(0xffffffffffffff9c, 0x0, 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) [ 562.001830][T22122] binder: 22121:22122 ioctl c0306201 20000440 returned -14 19:24:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x40000000}}], 0x1, 0x0, 0x0) 19:24:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x3000000}], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:52 executing program 4: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = openat$mixer(0xffffffffffffff9c, 0x0, 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 19:24:52 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = openat$mixer(0xffffffffffffff9c, 0x0, 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 19:24:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2000) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') syz_open_dev$amidi(&(0x7f0000000640)='/dev/amidi#\x00', 0x3, 0x0) sendfile(r2, r3, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) sendmsg$xdp(r2, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) 19:24:52 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0xf, 0x102, 0x1, {0x8, 0x7f, 0x1, 0x3}}) getpeername$netlink(r1, &(0x7f0000000140), &(0x7f0000000180)=0xc) socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) [ 562.527967][T22142] binder: 22136:22142 ioctl c0306201 20000440 returned -14 [ 562.553995][T22142] binder: 22136:22142 ioctl c0306201 20000440 returned -14 19:24:52 executing program 4: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$mixer(0xffffffffffffff9c, 0x0, 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) preadv(r1, &(0x7f0000000b40)=[{&(0x7f0000000480)=""/99, 0x63}, {&(0x7f0000000680)=""/104, 0x68}, {&(0x7f0000000700)=""/144, 0x90}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f0000000a40)=""/255, 0xff}], 0x6, 0x0) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 19:24:52 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = openat$mixer(0xffffffffffffff9c, 0x0, 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 19:24:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x4000000}], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x5000000}], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 562.717858][T22157] binder: 22156:22157 ioctl c0306201 20000440 returned -14 [ 562.744185][T22157] binder: 22156:22157 ioctl c0306201 20000440 returned -14 19:24:52 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$mixer(0xffffffffffffff9c, 0x0, 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) preadv(r1, &(0x7f0000000b40)=[{&(0x7f0000000480)=""/99, 0x63}, {&(0x7f0000000680)=""/104, 0x68}, {&(0x7f0000000700)=""/144, 0x90}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f0000000a40)=""/255, 0xff}], 0x6, 0x0) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 19:24:52 executing program 4: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$mixer(0xffffffffffffff9c, 0x0, 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) preadv(r1, &(0x7f0000000b40)=[{&(0x7f0000000480)=""/99, 0x63}, {&(0x7f0000000680)=""/104, 0x68}, {&(0x7f0000000700)=""/144, 0x90}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f0000000a40)=""/255, 0xff}], 0x6, 0x0) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) [ 562.878250][T22166] binder: 22165:22166 ioctl c0306201 20000440 returned -14 19:24:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x8dffffff}}], 0x1, 0x0, 0x0) 19:24:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x6000000}], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:53 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$mixer(0xffffffffffffff9c, 0x0, 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) preadv(r1, &(0x7f0000000b40)=[{&(0x7f0000000480)=""/99, 0x63}, {&(0x7f0000000680)=""/104, 0x68}, {&(0x7f0000000700)=""/144, 0x90}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f0000000a40)=""/255, 0xff}], 0x6, 0x0) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 19:24:53 executing program 4: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$mixer(0xffffffffffffff9c, 0x0, 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) preadv(r1, &(0x7f0000000b40)=[{&(0x7f0000000480)=""/99, 0x63}, {&(0x7f0000000680)=""/104, 0x68}, {&(0x7f0000000700)=""/144, 0x90}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f0000000a40)=""/255, 0xff}], 0x6, 0x0) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 19:24:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2000) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') syz_open_dev$amidi(&(0x7f0000000640)='/dev/amidi#\x00', 0x3, 0x0) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) [ 563.398712][T22188] binder: 22180:22188 ioctl c0306201 20000440 returned -14 [ 563.426131][T22188] binder: 22180:22188 ioctl c0306201 20000440 returned -14 19:24:53 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0xf, 0x102, 0x1, {0x8, 0x7f, 0x1, 0x3}}) getpeername$netlink(r1, &(0x7f0000000140), &(0x7f0000000180)=0xc) socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) 19:24:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x7000000}], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:53 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$mixer(0xffffffffffffff9c, 0x0, 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) preadv(r1, &(0x7f0000000b40)=[{&(0x7f0000000480)=""/99, 0x63}, {&(0x7f0000000680)=""/104, 0x68}, {&(0x7f0000000700)=""/144, 0x90}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f0000000a40)=""/255, 0xff}], 0x6, 0x0) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 19:24:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2000) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') syz_open_dev$amidi(&(0x7f0000000640)='/dev/amidi#\x00', 0x3, 0x0) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) 19:24:53 executing program 4: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x129000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) preadv(r1, &(0x7f0000000b40)=[{&(0x7f0000000480)=""/99, 0x63}, {&(0x7f0000000680)=""/104, 0x68}, {&(0x7f0000000700)=""/144, 0x90}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f0000000a40)=""/255, 0xff}], 0x6, 0x0) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) [ 563.583704][T22202] binder: 22199:22202 ioctl c0306201 20000440 returned -14 19:24:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0xa000000}], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 563.627233][T22202] binder: 22199:22202 ioctl c0306201 20000440 returned -14 19:24:53 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x129000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) preadv(r1, &(0x7f0000000b40)=[{&(0x7f0000000480)=""/99, 0x63}, {&(0x7f0000000680)=""/104, 0x68}, {&(0x7f0000000700)=""/144, 0x90}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f0000000a40)=""/255, 0xff}], 0x6, 0x0) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) [ 563.834271][T22219] binder: 22216:22219 ioctl c0306201 20000440 returned -14 [ 564.070672][T22223] kasan: CONFIG_KASAN_INLINE enabled [ 564.076237][T22223] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 564.087819][T22223] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 564.094759][T22223] CPU: 1 PID: 22223 Comm: syz-executor2 Not tainted 5.0.0-rc4-next-20190131 #23 [ 564.103766][T22223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 564.113823][T22223] RIP: 0010:debugfs_create_files+0x2e/0x140 [ 564.119701][T22223] Code: 41 56 49 89 fe 41 55 41 54 49 89 f4 53 48 89 d3 e8 67 30 4a fe 49 8d 7e 58 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 e3 00 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b [ 564.139294][T22223] RSP: 0018:ffff88804eb0fa20 EFLAGS: 00010203 [ 564.145364][T22223] RAX: dffffc0000000000 RBX: ffffffff87a1de20 RCX: ffffc9000a225000 [ 564.153366][T22223] RDX: 0000000000000008 RSI: ffffffff8325c6e9 RDI: 0000000000000047 [ 564.161323][T22223] RBP: ffff88804eb0fa40 R08: ffff8880520c2000 R09: fffffbfff11024e6 [ 564.169282][T22223] R10: fffffbfff11024e5 R11: ffffffff8881272b R12: ffff8880a503d0d0 [ 564.177258][T22223] R13: ffff8880a503d0d0 R14: ffffffffffffffef R15: ffff8880a503d198 [ 564.185205][T22223] FS: 00007f0120881700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 564.194105][T22223] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 564.200665][T22223] CR2: 00007ffef05fdfb8 CR3: 000000008c785000 CR4: 00000000001406e0 [ 564.208615][T22223] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 19:24:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0xf0ffffff}}], 0x1, 0x0, 0x0) 19:24:54 executing program 4: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x129000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) preadv(r1, &(0x7f0000000b40)=[{&(0x7f0000000480)=""/99, 0x63}, {&(0x7f0000000680)=""/104, 0x68}, {&(0x7f0000000700)=""/144, 0x90}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f0000000a40)=""/255, 0xff}], 0x6, 0x0) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 19:24:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2000) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') syz_open_dev$amidi(&(0x7f0000000640)='/dev/amidi#\x00', 0x3, 0x0) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) 19:24:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x12000000}], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) [ 564.216569][T22223] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 564.224532][T22223] Call Trace: [ 564.227826][T22223] blk_mq_debugfs_register+0xec/0x4e0 [ 564.233369][T22223] blk_register_queue+0x1bc/0x370 [ 564.238440][T22223] __device_add_disk+0xccc/0x1160 [ 564.243470][T22223] ? blk_alloc_devt+0x2e0/0x2e0 [ 564.248325][T22223] ? sprintf+0xc0/0x100 [ 564.252482][T22223] ? scnprintf+0x140/0x140 [ 564.256961][T22223] ? pm_runtime_init+0x342/0x3f0 [ 564.261901][T22223] device_add_disk+0x2b/0x40 [ 564.266515][T22223] loop_add+0x635/0x8d0 [ 564.270686][T22223] loop_control_ioctl+0x165/0x360 [ 564.275705][T22223] ? loop_add+0x8d0/0x8d0 [ 564.280028][T22223] ? __fget+0x340/0x540 [ 564.284180][T22223] ? loop_add+0x8d0/0x8d0 [ 564.288522][T22223] do_vfs_ioctl+0xd6e/0x1390 [ 564.293107][T22223] ? lockdep_hardirqs_on+0x418/0x5d0 [ 564.298386][T22223] ? retint_kernel+0x2d/0x2d [ 564.302973][T22223] ? ioctl_preallocate+0x210/0x210 [ 564.308110][T22223] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 564.313567][T22223] ? retint_kernel+0x2d/0x2d [ 564.318154][T22223] ? security_file_ioctl+0x93/0xc0 [ 564.323257][T22223] ksys_ioctl+0xab/0xd0 [ 564.327412][T22223] __x64_sys_ioctl+0x73/0xb0 [ 564.332000][T22223] do_syscall_64+0x103/0x610 [ 564.336584][T22223] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 564.342468][T22223] RIP: 0033:0x457e39 [ 564.346354][T22223] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 564.365942][T22223] RSP: 002b:00007f0120880c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 564.374342][T22223] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e39 [ 564.382309][T22223] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000005 [ 564.390283][T22223] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 564.398254][T22223] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f01208816d4 [ 564.406238][T22223] R13: 00000000004c1108 R14: 00000000004d2ed0 R15: 00000000ffffffff [ 564.414226][T22223] Modules linked in: [ 564.418211][T22223] ---[ end trace 91233cfc57437b8a ]--- [ 564.423737][T22223] RIP: 0010:debugfs_create_files+0x2e/0x140 [ 564.434812][ T7856] kobject: '0' (00000000fe38f8b7): kobject_cleanup, parent (null) [ 564.443557][ T7856] kobject: '0' (00000000fe38f8b7): calling ktype release [ 564.450664][ T7856] kobject: '0': free name [ 564.455053][ T7856] kobject: 'cpu0' (00000000e989fc87): kobject_cleanup, parent (null) [ 564.462721][T22233] binder_transaction: 13 callbacks suppressed 19:24:54 executing program 1: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/237) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0xf, 0x102, 0x1, {0x8, 0x7f, 0x1, 0x3}}) getpeername$netlink(r1, &(0x7f0000000140), &(0x7f0000000180)=0xc) socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) [ 564.462736][T22233] binder: 22232:22233 transaction failed 29189/-22, size 24-0 line 2903 [ 564.464196][ T7856] kobject: 'cpu0' (00000000e989fc87): calling ktype release [ 564.485775][ T7856] kobject: 'cpu0': free name [ 564.490457][ T7856] kobject: 'cpu1' (00000000d561c2a0): kobject_cleanup, parent (null) [ 564.499521][ T7856] kobject: 'cpu1' (00000000d561c2a0): calling ktype release [ 564.500792][T22233] binder: 22232:22233 ioctl c0306201 20000440 returned -14 [ 564.506838][ T7856] kobject: 'cpu1': free name 19:24:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x48000000}], 0x0}}], 0x55, 0x100000000000000, &(0x7f00000003c0)}) 19:24:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2000) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, 0x0, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/217, 0xd9}], 0x1, 0x0) [ 564.518735][ T7856] kobject: 'mq' (000000007224e6e2): kobject_cleanup, parent (null) [ 564.527534][ T7856] kobject: 'mq' (000000007224e6e2): calling ktype release [ 564.534642][ T7856] kobject: 'mq': free name [ 564.643838][T22223] Code: 41 56 49 89 fe 41 55 41 54 49 89 f4 53 48 89 d3 e8 67 30 4a fe 49 8d 7e 58 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 e3 00 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b [ 564.663816][T22223] RSP: 0018:ffff88804eb0fa20 EFLAGS: 00010203 [ 564.695739][T22223] RAX: dffffc0000000000 RBX: ffffffff87a1de20 RCX: ffffc9000a225000 [ 564.705822][T22223] RDX: 0000000000000008 RSI: ffffffff8325c6e9 RDI: 0000000000000047 [ 564.719269][T22223] RBP: ffff88804eb0fa40 R08: ffff8880520c2000 R09: fffffbfff11024e6 [ 564.732616][T22223] R10: fffffbfff11024e5 R11: ffffffff8881272b R12: ffff8880a503d0d0 [ 564.746080][T22223] R13: ffff8880a503d0d0 R14: ffffffffffffffef R15: ffff8880a503d198 [ 564.759427][T22223] FS: 00007f0120881700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 564.772835][T22223] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 564.787815][T22223] CR2: 0000000000000000 CR3: 000000008c785000 CR4: 00000000001406e0 [ 564.795843][T22223] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 564.803870][T22223] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 564.825551][T22223] Kernel panic - not syncing: Fatal exception [ 564.832560][T22223] Kernel Offset: disabled [ 564.836876][T22223] Rebooting in 86400 seconds..