, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:19:59 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x37, 0x0, &(0x7f00000001c0)="4a3949b02475882cdb95d185fae02231859004888c73757bb240ce37710071330afaa902d75f37e6b9e9d15998c5a04d2b9581017088d1"}) 14:19:59 executing program 1: r0 = socket(0x2, 0x3, 0x9) r1 = socket(0x15, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000740)=0x2, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-vsock\x00', 0x2, 0x0) connect$caif(r0, &(0x7f0000000580)=@dbg={0x25, 0x5, 0x5}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vhost-vsock\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="070a27bd7000fedbdf2501000000050022000000000008000a000000000008000a000000000005000d000000000063ea5fe8b6f878091d01717eb0e1d623"], 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x20000000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640)='batadv\x00', r3) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3b030000", @ANYRES16=r4, @ANYBLOB="200028bd7000fddbdf250900000005003300020000000a000900aaaaaaaaaa16000008003a00c7fa0000"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 519.055555] binder: 11085:11091 ioctl c0306201 0 returned -14 14:19:59 executing program 0: r0 = socket(0x2, 0x3, 0x9) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x4, 0x30}, 0xc) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xfffffffffffffe32, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_DPORT={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_hsr\x00'}]}, 0x24}}, 0x0) 14:19:59 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x37, 0x0, &(0x7f00000001c0)="4a3949b02475882cdb95d185fae02231859004888c73757bb240ce37710071330afaa902d75f37e6b9e9d15998c5a04d2b9581017088d1"}) 14:19:59 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x37, 0x0, &(0x7f00000001c0)="4a3949b02475882cdb95d185fae02231859004888c73757bb240ce37710071330afaa902d75f37e6b9e9d15998c5a04d2b9581017088d1"}) 14:19:59 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @fda={0x66646185, 0xa, 0x1, 0x27}, @fda={0x66646185, 0xa, 0x2, 0x1f}}, &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x37, 0x0, &(0x7f00000001c0)="4a3949b02475882cdb95d185fae02231859004888c73757bb240ce37710071330afaa902d75f37e6b9e9d15998c5a04d2b9581017088d1"}) [ 519.112423] binder: 11092:11097 ioctl c0306201 0 returned -14 14:19:59 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x37, 0x0, &(0x7f00000001c0)="4a3949b02475882cdb95d185fae02231859004888c73757bb240ce37710071330afaa902d75f37e6b9e9d15998c5a04d2b9581017088d1"}) 14:19:59 executing program 1: r0 = socket(0x2, 0x3, 0x9) r1 = socket(0x15, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000740)=0x2, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-vsock\x00', 0x2, 0x0) connect$caif(r0, &(0x7f0000000580)=@dbg={0x25, 0x5, 0x5}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vhost-vsock\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="070a27bd7000fedbdf2501000000050022000000000008000a000000000008000a000000000005000d000000000063ea5fe8b6f878091d01717eb0e1d623"], 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x20000000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640)='batadv\x00', r3) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3b030000", @ANYRES16=r4, @ANYBLOB="200028bd7000fddbdf250900000005003300020000000a000900aaaaaaaaaa16000008003a00c7fa0000"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 14:19:59 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000300)=[@acquire={0x40046305, 0x1}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:19:59 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @fda={0x66646185, 0xa, 0x1, 0x27}, @fda={0x66646185, 0xa, 0x2, 0x1f}}, &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x37, 0x0, &(0x7f00000001c0)="4a3949b02475882cdb95d185fae02231859004888c73757bb240ce37710071330afaa902d75f37e6b9e9d15998c5a04d2b9581017088d1"}) 14:19:59 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @fda={0x66646185, 0xa, 0x1, 0x27}, @fda={0x66646185, 0xa, 0x2, 0x1f}}, &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x37, 0x0, &(0x7f00000001c0)="4a3949b02475882cdb95d185fae02231859004888c73757bb240ce37710071330afaa902d75f37e6b9e9d15998c5a04d2b9581017088d1"}) [ 519.188737] binder: 11102:11109 ioctl c0306201 0 returned -14 14:19:59 executing program 1: r0 = socket(0x2, 0x3, 0x9) r1 = socket(0x15, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000740)=0x2, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-vsock\x00', 0x2, 0x0) connect$caif(r0, &(0x7f0000000580)=@dbg={0x25, 0x5, 0x5}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vhost-vsock\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="070a27bd7000fedbdf2501000000050022000000000008000a000000000008000a000000000005000d000000000063ea5fe8b6f878091d01717eb0e1d623"], 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f0000000640)='batadv\x00', r3) 14:19:59 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @fda={0x66646185, 0xa, 0x1, 0x27}, @fda={0x66646185, 0xa, 0x2, 0x1f}}, &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x37, 0x0, &(0x7f00000001c0)="4a3949b02475882cdb95d185fae02231859004888c73757bb240ce37710071330afaa902d75f37e6b9e9d15998c5a04d2b9581017088d1"}) 14:19:59 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x37, 0x0, &(0x7f00000001c0)="4a3949b02475882cdb95d185fae02231859004888c73757bb240ce37710071330afaa902d75f37e6b9e9d15998c5a04d2b9581017088d1"}) 14:19:59 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000300)=[@acquire={0x40046305, 0x1}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:19:59 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x37, 0x0, &(0x7f00000001c0)="4a3949b02475882cdb95d185fae02231859004888c73757bb240ce37710071330afaa902d75f37e6b9e9d15998c5a04d2b9581017088d1"}) 14:19:59 executing program 1: r0 = socket(0x2, 0x3, 0x9) r1 = socket(0x15, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000740)=0x2, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-vsock\x00', 0x2, 0x0) connect$caif(r0, &(0x7f0000000580)=@dbg={0x25, 0x5, 0x5}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vhost-vsock\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="070a27bd7000fedbdf2501000000050022000000000008000a000000000008000a000000000005000d000000000063ea5fe8b6f878091d01717eb0e1d623"], 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x20000000) 14:19:59 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x37, 0x0, &(0x7f00000001c0)="4a3949b02475882cdb95d185fae02231859004888c73757bb240ce37710071330afaa902d75f37e6b9e9d15998c5a04d2b9581017088d1"}) 14:19:59 executing program 0: r0 = socket(0x2, 0x3, 0x9) r1 = socket(0x15, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000740)=0x2, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-vsock\x00', 0x2, 0x0) connect$caif(r0, &(0x7f0000000580)=@dbg={0x25, 0x5, 0x5}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vhost-vsock\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="070a27bd7000fedbdf2501000000050022000000000008000a000000000008000a000000000005000d000000000063ea5fe8b6f878091d01717eb0e1d623"], 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f0000000640)='batadv\x00', r3) 14:19:59 executing program 1: r0 = socket(0x2, 0x3, 0x9) r1 = socket(0x15, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000740)=0x2, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-vsock\x00', 0x2, 0x0) connect$caif(r0, &(0x7f0000000580)=@dbg={0x25, 0x5, 0x5}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vhost-vsock\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 14:19:59 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) [ 519.359529] binder: 11130:11136 ioctl c0306201 0 returned -14 14:19:59 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @fda={0x66646185, 0xa, 0x1, 0x27}, @fda={0x66646185, 0xa, 0x2, 0x1f}}, &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x37, 0x0, &(0x7f00000001c0)="4a3949b02475882cdb95d185fae02231859004888c73757bb240ce37710071330afaa902d75f37e6b9e9d15998c5a04d2b9581017088d1"}) 14:19:59 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:19:59 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x37, 0x0, &(0x7f00000001c0)="4a3949b02475882cdb95d185fae02231859004888c73757bb240ce37710071330afaa902d75f37e6b9e9d15998c5a04d2b9581017088d1"}) 14:19:59 executing program 1: r0 = socket(0x2, 0x3, 0x9) r1 = socket(0x15, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000740)=0x2, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-vsock\x00', 0x2, 0x0) connect$caif(r0, &(0x7f0000000580)=@dbg={0x25, 0x5, 0x5}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vhost-vsock\x00', 0x2, 0x0) 14:19:59 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x37, 0x0, &(0x7f00000001c0)="4a3949b02475882cdb95d185fae02231859004888c73757bb240ce37710071330afaa902d75f37e6b9e9d15998c5a04d2b9581017088d1"}) 14:19:59 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x37, 0x0, &(0x7f00000001c0)="4a3949b02475882cdb95d185fae02231859004888c73757bb240ce37710071330afaa902d75f37e6b9e9d15998c5a04d2b9581017088d1"}) 14:19:59 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:19:59 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x37, 0x0, &(0x7f00000001c0)="4a3949b02475882cdb95d185fae02231859004888c73757bb240ce37710071330afaa902d75f37e6b9e9d15998c5a04d2b9581017088d1"}) 14:19:59 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @fda={0x66646185, 0xa, 0x1, 0x27}, @fda={0x66646185, 0xa, 0x2, 0x1f}}, &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x37, 0x0, &(0x7f00000001c0)="4a3949b02475882cdb95d185fae02231859004888c73757bb240ce37710071330afaa902d75f37e6b9e9d15998c5a04d2b9581017088d1"}) 14:19:59 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:19:59 executing program 1: r0 = socket(0x2, 0x3, 0x9) r1 = socket(0x15, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000740)=0x2, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-vsock\x00', 0x2, 0x0) connect$caif(r0, &(0x7f0000000580)=@dbg={0x25, 0x5, 0x5}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) [ 519.501265] binder: 11150:11157 ioctl c0306201 0 returned -14 [ 519.538740] binder: 11159:11160 ioctl c0306201 0 returned -14 14:19:59 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:19:59 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @fda={0x66646185, 0xa, 0x1, 0x27}, @fda={0x66646185, 0xa, 0x2, 0x1f}}, &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x37, 0x0, &(0x7f00000001c0)="4a3949b02475882cdb95d185fae02231859004888c73757bb240ce37710071330afaa902d75f37e6b9e9d15998c5a04d2b9581017088d1"}) 14:19:59 executing program 0: r0 = socket(0x2, 0x3, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000080)=0x4) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000180)=0x4) bind$isdn(r0, &(0x7f0000000040)={0x22, 0x4, 0x7, 0x7}, 0x6) 14:19:59 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:19:59 executing program 1: r0 = socket(0x2, 0x3, 0x9) r1 = socket(0x15, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000740)=0x2, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-vsock\x00', 0x2, 0x0) connect$caif(r0, &(0x7f0000000580)=@dbg={0x25, 0x5, 0x5}, 0x18) 14:19:59 executing program 3: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @fda={0x66646185, 0xa, 0x1, 0x27}, @fda={0x66646185, 0xa, 0x2, 0x1f}}, &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x37, 0x0, &(0x7f00000001c0)="4a3949b02475882cdb95d185fae02231859004888c73757bb240ce37710071330afaa902d75f37e6b9e9d15998c5a04d2b9581017088d1"}) 14:19:59 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x37, 0x0, &(0x7f00000001c0)="4a3949b02475882cdb95d185fae02231859004888c73757bb240ce37710071330afaa902d75f37e6b9e9d15998c5a04d2b9581017088d1"}) 14:19:59 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000300)=[@acquire={0x40046305, 0x1}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:19:59 executing program 1: socket(0x2, 0x3, 0x9) r0 = socket(0x15, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000740)=0x2, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-vsock\x00', 0x2, 0x0) 14:19:59 executing program 0: r0 = socket(0x2, 0x3, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000080)=0x4) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000180)=0x4) bind$isdn(r0, &(0x7f0000000040)={0x22, 0x4, 0x7, 0x7}, 0x6) 14:19:59 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:19:59 executing program 3: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @fda={0x66646185, 0xa, 0x1, 0x27}, @fda={0x66646185, 0xa, 0x2, 0x1f}}, &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x37, 0x0, &(0x7f00000001c0)="4a3949b02475882cdb95d185fae02231859004888c73757bb240ce37710071330afaa902d75f37e6b9e9d15998c5a04d2b9581017088d1"}) 14:19:59 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x37, 0x0, &(0x7f00000001c0)="4a3949b02475882cdb95d185fae02231859004888c73757bb240ce37710071330afaa902d75f37e6b9e9d15998c5a04d2b9581017088d1"}) 14:19:59 executing program 0: r0 = socket(0x2, 0x3, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000080)=0x4) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000180)=0x4) bind$isdn(r0, &(0x7f0000000040)={0x22, 0x4, 0x7, 0x7}, 0x6) 14:20:00 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000300)=[@acquire={0x40046305, 0x1}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:00 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:00 executing program 1: socket(0x2, 0x3, 0x9) r0 = socket(0x15, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000740)=0x2, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) 14:20:00 executing program 3: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @fda={0x66646185, 0xa, 0x1, 0x27}, @fda={0x66646185, 0xa, 0x2, 0x1f}}, &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x37, 0x0, &(0x7f00000001c0)="4a3949b02475882cdb95d185fae02231859004888c73757bb240ce37710071330afaa902d75f37e6b9e9d15998c5a04d2b9581017088d1"}) 14:20:00 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) [ 519.839951] binder: 11203:11210 ioctl c0306201 0 returned -14 14:20:00 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000300)=[@acquire={0x40046305, 0x1}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:00 executing program 0: r0 = socket(0x2, 0x3, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000080)=0x4) bind$isdn(r0, &(0x7f0000000040)={0x22, 0x4, 0x7, 0x7}, 0x6) 14:20:00 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x37, 0x0, &(0x7f00000001c0)="4a3949b02475882cdb95d185fae02231859004888c73757bb240ce37710071330afaa902d75f37e6b9e9d15998c5a04d2b9581017088d1"}) 14:20:00 executing program 1: socket(0x2, 0x3, 0x9) r0 = socket(0x15, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000740)=0x2, 0x4) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 14:20:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @fda={0x66646185, 0xa, 0x1, 0x27}, @fda={0x66646185, 0xa, 0x2, 0x1f}}, &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x37, 0x0, &(0x7f00000001c0)="4a3949b02475882cdb95d185fae02231859004888c73757bb240ce37710071330afaa902d75f37e6b9e9d15998c5a04d2b9581017088d1"}) 14:20:00 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:00 executing program 0: r0 = socket(0x2, 0x3, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) bind$isdn(r0, &(0x7f0000000040)={0x22, 0x4, 0x7, 0x7}, 0x6) 14:20:00 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000300)=[@acquire={0x40046305, 0x1}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:00 executing program 1: socket(0x2, 0x3, 0x9) r0 = socket(0x15, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000740)=0x2, 0x4) 14:20:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @fda={0x66646185, 0xa, 0x1, 0x27}, @fda={0x66646185, 0xa, 0x2, 0x1f}}, &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x37, 0x0, &(0x7f00000001c0)="4a3949b02475882cdb95d185fae02231859004888c73757bb240ce37710071330afaa902d75f37e6b9e9d15998c5a04d2b9581017088d1"}) [ 519.998770] binder: 11224:11230 ioctl c0306201 0 returned -14 14:20:00 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x37, 0x0, &(0x7f00000001c0)="4a3949b02475882cdb95d185fae02231859004888c73757bb240ce37710071330afaa902d75f37e6b9e9d15998c5a04d2b9581017088d1"}) 14:20:00 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:00 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000300)=[@acquire={0x40046305, 0x1}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:00 executing program 0: r0 = socket(0x2, 0x3, 0x9) bind$isdn(r0, &(0x7f0000000040)={0x22, 0x4, 0x7, 0x7}, 0x6) 14:20:00 executing program 1: socket(0x2, 0x3, 0x9) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000740)=0x2, 0x4) 14:20:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @fda={0x66646185, 0xa, 0x1, 0x27}, @fda={0x66646185, 0xa, 0x2, 0x1f}}, &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x37, 0x0, &(0x7f00000001c0)="4a3949b02475882cdb95d185fae02231859004888c73757bb240ce37710071330afaa902d75f37e6b9e9d15998c5a04d2b9581017088d1"}) 14:20:00 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 520.102947] binder: 11244:11249 ioctl c0306201 0 returned -14 14:20:00 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000300)=[@acquire={0x40046305, 0x1}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:00 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:00 executing program 0: bind$isdn(0xffffffffffffffff, &(0x7f0000000040)={0x22, 0x4, 0x7, 0x7}, 0x6) 14:20:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @fda={0x66646185, 0xa, 0x1, 0x27}, @fda={0x66646185, 0xa, 0x2, 0x1f}}, &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x37, 0x0, &(0x7f00000001c0)="4a3949b02475882cdb95d185fae02231859004888c73757bb240ce37710071330afaa902d75f37e6b9e9d15998c5a04d2b9581017088d1"}) 14:20:00 executing program 1: socket(0x2, 0x3, 0x9) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000740)=0x2, 0x4) 14:20:00 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000300)=[@acquire={0x40046305, 0x1}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:00 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) [ 520.214736] binder: 11256:11260 ioctl c0306201 0 returned -14 [ 520.228320] binder: 11256:11260 ioctl c0306201 0 returned -14 [ 520.251170] binder: 11266:11268 ioctl c0306201 0 returned -14 14:20:00 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 14:20:00 executing program 0: bind$isdn(0xffffffffffffffff, &(0x7f0000000040)={0x22, 0x4, 0x7, 0x7}, 0x6) 14:20:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @fda={0x66646185, 0xa, 0x1, 0x27}, @fda={0x66646185, 0xa, 0x2, 0x1f}}, &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x37, 0x0, &(0x7f00000001c0)="4a3949b02475882cdb95d185fae02231859004888c73757bb240ce37710071330afaa902d75f37e6b9e9d15998c5a04d2b9581017088d1"}) 14:20:00 executing program 1: socket(0x2, 0x3, 0x9) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000740)=0x2, 0x4) 14:20:00 executing program 5: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:00 executing program 0: bind$isdn(0xffffffffffffffff, &(0x7f0000000040)={0x22, 0x4, 0x7, 0x7}, 0x6) 14:20:00 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000300)=[@acquire={0x40046305, 0x1}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) [ 520.334781] binder: 11276:11282 ioctl c0306201 0 returned -14 [ 520.350481] binder: 11276:11282 ioctl c0306201 0 returned -14 14:20:00 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 14:20:00 executing program 1: r0 = socket(0x15, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000740)=0x2, 0x4) 14:20:00 executing program 0: r0 = socket(0x0, 0x3, 0x9) bind$isdn(r0, &(0x7f0000000040)={0x22, 0x4, 0x7, 0x7}, 0x6) 14:20:00 executing program 5: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) [ 520.390713] binder: 11280:11287 ioctl c0306201 0 returned -14 14:20:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @fda={0x66646185, 0xa, 0x1, 0x27}, @fda={0x66646185, 0xa, 0x2, 0x1f}}, &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x37, 0x0, &(0x7f00000001c0)="4a3949b02475882cdb95d185fae02231859004888c73757bb240ce37710071330afaa902d75f37e6b9e9d15998c5a04d2b9581017088d1"}) 14:20:00 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000300)=[@acquire={0x40046305, 0x1}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:00 executing program 1: r0 = socket(0x0, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000740)=0x2, 0x4) [ 520.453584] binder: 11293:11298 ioctl c0306201 0 returned -14 [ 520.485322] binder: 11293:11298 ioctl c0306201 0 returned -14 14:20:00 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:20:00 executing program 5: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:00 executing program 0: r0 = socket(0x0, 0x3, 0x9) bind$isdn(r0, &(0x7f0000000040)={0x22, 0x4, 0x7, 0x7}, 0x6) [ 520.509979] binder: 11302:11307 ioctl c0306201 0 returned -14 14:20:00 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:00 executing program 1: r0 = socket(0x0, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000740)=0x2, 0x4) 14:20:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 14:20:00 executing program 0: r0 = socket(0x0, 0x3, 0x9) bind$isdn(r0, &(0x7f0000000040)={0x22, 0x4, 0x7, 0x7}, 0x6) 14:20:00 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 520.588930] binder: 11312:11316 ioctl c0306201 0 returned -14 14:20:00 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 520.642531] binder: 11322:11326 ioctl c0306201 0 returned -14 [ 520.642868] binder: 11317:11324 ioctl c0306201 0 returned -14 [ 520.677595] binder: 11322:11326 ioctl c0306201 0 returned -14 14:20:00 executing program 1: r0 = socket(0x0, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000740)=0x2, 0x4) 14:20:00 executing program 0: r0 = socket(0x2, 0x0, 0x9) bind$isdn(r0, &(0x7f0000000040)={0x22, 0x4, 0x7, 0x7}, 0x6) [ 520.688459] binder: 11328:11334 ioctl c0306201 0 returned -14 14:20:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 14:20:00 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 520.730520] binder: 11333:11336 ioctl c0306201 0 returned -14 14:20:00 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 14:20:00 executing program 1: r0 = socket(0x15, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000740)=0x2, 0x4) [ 520.781341] binder: 11342:11348 ioctl c0306201 0 returned -14 [ 520.791810] binder: 11340:11347 ioctl c0306201 0 returned -14 [ 520.808814] binder: 11340:11347 ioctl c0306201 0 returned -14 [ 520.835296] binder: 11350:11355 ioctl c0306201 0 returned -14 14:20:01 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:01 executing program 0: r0 = socket(0x2, 0x0, 0x9) bind$isdn(r0, &(0x7f0000000040)={0x22, 0x4, 0x7, 0x7}, 0x6) 14:20:01 executing program 1: r0 = socket(0x15, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000740)=0x2, 0x4) 14:20:01 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) 14:20:01 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 14:20:01 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 14:20:01 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) [ 521.472064] binder: 11363:11367 ioctl c0306201 0 returned -14 [ 521.501052] binder: 11365:11372 ioctl c0306201 0 returned -14 [ 521.509736] binder: 11370:11377 ioctl c0306201 0 returned -14 14:20:01 executing program 1: r0 = socket(0x15, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000740)=0x2, 0x4) 14:20:01 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x37, 0x0, &(0x7f00000001c0)="4a3949b02475882cdb95d185fae02231859004888c73757bb240ce37710071330afaa902d75f37e6b9e9d15998c5a04d2b9581017088d1"}) 14:20:01 executing program 0: r0 = socket(0x2, 0x0, 0x9) bind$isdn(r0, &(0x7f0000000040)={0x22, 0x4, 0x7, 0x7}, 0x6) 14:20:01 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) [ 521.519607] binder: 11364:11374 ioctl c0306201 0 returned -14 [ 521.537177] binder: 11364:11374 ioctl c0306201 0 returned -14 [ 521.550054] binder: 11376:11379 ioctl c0306201 0 returned -14 14:20:01 executing program 1: socket(0x15, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000740)=0x2, 0x4) [ 521.628655] binder: 11385:11390 ioctl c0306201 0 returned -14 14:20:02 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:02 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) 14:20:02 executing program 1: socket(0x15, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000740)=0x2, 0x4) 14:20:02 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:02 executing program 0: r0 = socket(0x2, 0x3, 0x0) bind$isdn(r0, &(0x7f0000000040)={0x22, 0x4, 0x7, 0x7}, 0x6) 14:20:02 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:02 executing program 1: socket(0x15, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000740)=0x2, 0x4) 14:20:02 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1c, 0x0, &(0x7f00000001c0)="4a3949b02475882cdb95d185fae02231859004888c73757bb240ce37"}) [ 522.365394] binder: 11403:11408 ioctl c0306201 0 returned -14 [ 522.390495] binder: 11407:11413 ioctl c0306201 0 returned -14 14:20:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x37, 0x0, &(0x7f00000001c0)="4a3949b02475882cdb95d185fae02231859004888c73757bb240ce37710071330afaa902d75f37e6b9e9d15998c5a04d2b9581017088d1"}) 14:20:02 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x40, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:02 executing program 0: r0 = socket(0x2, 0x3, 0x0) bind$isdn(r0, &(0x7f0000000040)={0x22, 0x4, 0x7, 0x7}, 0x6) 14:20:02 executing program 1: r0 = socket(0x15, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, 0x0) [ 522.477228] binder: 11422:11425 ioctl c0306201 0 returned -14 [ 522.525552] binder: 11426:11434 ioctl c0306201 0 returned -14 14:20:03 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:03 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:03 executing program 0: r0 = socket(0x2, 0x3, 0x0) bind$isdn(r0, &(0x7f0000000040)={0x22, 0x4, 0x7, 0x7}, 0x6) 14:20:03 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x3c, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:03 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x3c, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:03 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x3c, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) [ 523.253182] binder: 11443:11448 ioctl c0306201 0 returned -14 14:20:03 executing program 0: socket(0x2, 0x3, 0x9) bind$isdn(0xffffffffffffffff, &(0x7f0000000040)={0x22, 0x4, 0x7, 0x7}, 0x6) 14:20:03 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)='J'}) 14:20:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x37, 0x0, &(0x7f00000001c0)="4a3949b02475882cdb95d185fae02231859004888c73757bb240ce37710071330afaa902d75f37e6b9e9d15998c5a04d2b9581017088d1"}) 14:20:03 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:03 executing program 0: socket(0x2, 0x3, 0x9) bind$isdn(0xffffffffffffffff, &(0x7f0000000040)={0x22, 0x4, 0x7, 0x7}, 0x6) [ 523.350745] binder: 11461:11463 ioctl c0306201 0 returned -14 14:20:03 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x30, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) [ 523.396874] binder: 11465:11470 ioctl c0306201 0 returned -14 14:20:04 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:04 executing program 0: socket(0x2, 0x3, 0x9) bind$isdn(0xffffffffffffffff, &(0x7f0000000040)={0x22, 0x4, 0x7, 0x7}, 0x6) 14:20:04 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x30, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:04 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:04 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x30, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:04 executing program 0: r0 = socket(0x2, 0x3, 0x9) bind$isdn(r0, 0x0, 0x0) [ 524.103870] binder: 11481:11482 ioctl c0306201 0 returned -14 14:20:04 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @register_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:04 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) 14:20:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), 0x37, 0x0, &(0x7f00000001c0)="4a3949b02475882cdb95d185fae02231859004888c73757bb240ce37710071330afaa902d75f37e6b9e9d15998c5a04d2b9581017088d1"}) 14:20:04 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:20:04 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000000)=[@release, @register_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:04 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) [ 524.241593] binder: 11499:11501 ioctl c0306201 0 returned -14 [ 524.271631] binder: 11503:11506 ioctl c0306201 0 returned -14 [ 524.271760] binder: 11502:11505 ioctl c0306201 0 returned -14 [ 524.336965] binder: 11511:11513 ioctl c0306201 0 returned -14 14:20:05 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:05 executing program 0: r0 = socket(0x2, 0x3, 0x6) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x805) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 14:20:05 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000000)=[@register_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:05 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) 14:20:05 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:05 executing program 0: r0 = socket(0x2, 0x3, 0x6) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x805) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 14:20:05 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000000)=[@register_looper, @enter_looper], 0x0, 0x0, 0x0}) 14:20:05 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) [ 524.998719] binder: 11521:11526 ioctl c0306201 0 returned -14 [ 525.013177] binder: 11523:11529 ioctl c0306201 0 returned -14 14:20:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), 0x37, 0x0, &(0x7f00000001c0)="4a3949b02475882cdb95d185fae02231859004888c73757bb240ce37710071330afaa902d75f37e6b9e9d15998c5a04d2b9581017088d1"}) 14:20:05 executing program 0: r0 = socket(0x2, 0x3, 0x6) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x805) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 14:20:05 executing program 5: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r4, &(0x7f0000000100)=""/128, 0x80) write$UHID_INPUT(r3, 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r5, 0x0, 0x0) socket(0x2, 0x0, 0x7fffefff) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 14:20:05 executing program 0: r0 = socket(0x2, 0x3, 0x6) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x805) [ 525.154119] binder: 11544:11549 ioctl c0306201 0 returned -14 14:20:06 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x8, 0x0, &(0x7f0000000300)=[@acquire={0x40046305, 0x1}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:06 executing program 0: sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x805) 14:20:06 executing program 5: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r4, &(0x7f0000000100)=""/128, 0x80) write$UHID_INPUT(r3, 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r5, 0x0, 0x0) socket(0x2, 0x0, 0x7fffefff) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 14:20:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:06 executing program 0: sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x805) 14:20:06 executing program 5: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r4, &(0x7f0000000100)=""/128, 0x80) write$UHID_INPUT(r3, 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r5, 0x0, 0x0) socket(0x2, 0x0, 0x7fffefff) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 14:20:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:06 executing program 4: r0 = socket(0x2, 0x3, 0x9) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xfffffffffffffe32, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_DPORT={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_hsr\x00'}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r1) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r2, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}}, 0x20000000) 14:20:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), 0x37, 0x0, &(0x7f00000001c0)="4a3949b02475882cdb95d185fae02231859004888c73757bb240ce37710071330afaa902d75f37e6b9e9d15998c5a04d2b9581017088d1"}) 14:20:06 executing program 0: sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x805) 14:20:06 executing program 5: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r4, &(0x7f0000000100)=""/128, 0x80) write$UHID_INPUT(r3, 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r5, 0x0, 0x0) socket(0x2, 0x0, 0x7fffefff) 14:20:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) [ 526.063839] binder: 11584:11593 ioctl c0306201 0 returned -14 14:20:06 executing program 4: socket(0x2, 0x3, 0x9) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040)=0x1, 0x4) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000140)=0x1) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000)='802.15.4 MAC\x00', 0xffffffffffffffff) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000180)=0x8, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000080), 0x4) 14:20:06 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x8, 0x0, &(0x7f0000000300)=[@acquire={0x40046305, 0x1}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:06 executing program 5: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r4, &(0x7f0000000100)=""/128, 0x80) write$UHID_INPUT(r3, 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r5, 0x0, 0x0) 14:20:06 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:06 executing program 0: r0 = socket(0x0, 0x3, 0x6) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x805) 14:20:06 executing program 4: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r4, &(0x7f0000000100)=""/128, 0x80) write$UHID_INPUT(r3, 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r5, 0x0, 0x0) socket(0x2, 0x0, 0x7fffefff) 14:20:06 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:06 executing program 0: r0 = socket(0x0, 0x3, 0x6) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x805) 14:20:07 executing program 0: r0 = socket(0x0, 0x3, 0x6) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x805) 14:20:07 executing program 5: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r4, &(0x7f0000000100)=""/128, 0x80) write$UHID_INPUT(r3, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 14:20:07 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)}}], 0x37, 0x0, &(0x7f00000001c0)="4a3949b02475882cdb95d185fae02231859004888c73757bb240ce37710071330afaa902d75f37e6b9e9d15998c5a04d2b9581017088d1"}) 14:20:07 executing program 4: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r4, &(0x7f0000000100)=""/128, 0x80) write$UHID_INPUT(r3, 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r5, 0x0, 0x0) socket(0x2, 0x0, 0x7fffefff) 14:20:07 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) [ 526.916186] binder: 11633:11640 ioctl c0306201 0 returned -14 14:20:07 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x8, 0x0, &(0x7f0000000300)=[@acquire={0x40046305, 0x1}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:07 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:07 executing program 0: r0 = socket(0x2, 0x0, 0x6) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x805) 14:20:07 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x37, 0x0, &(0x7f00000001c0)="4a3949b02475882cdb95d185fae02231859004888c73757bb240ce37710071330afaa902d75f37e6b9e9d15998c5a04d2b9581017088d1"}) 14:20:07 executing program 4: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r4, &(0x7f0000000100)=""/128, 0x80) write$UHID_INPUT(r3, 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r5, 0x0, 0x0) socket(0x2, 0x0, 0x7fffefff) 14:20:07 executing program 5: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r4, &(0x7f0000000100)=""/128, 0x80) write$UHID_INPUT(r3, 0x0, 0x0) 14:20:07 executing program 5: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r3, &(0x7f0000000100)=""/128, 0x80) 14:20:07 executing program 0: r0 = socket(0x2, 0x0, 0x6) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x805) [ 527.598260] binder: 11657:11671 ioctl c0306201 0 returned -14 14:20:07 executing program 4: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r4, &(0x7f0000000100)=""/128, 0x80) write$UHID_INPUT(r3, 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r5, 0x0, 0x0) 14:20:07 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:07 executing program 0: r0 = socket(0x2, 0x0, 0x6) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x805) 14:20:07 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 527.730113] binder: 11687:11691 ioctl c0306201 0 returned -14 14:20:08 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x44, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:08 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:08 executing program 4: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r4, &(0x7f0000000100)=""/128, 0x80) write$UHID_INPUT(r3, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 14:20:08 executing program 3: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r4, &(0x7f0000000100)=""/128, 0x80) write$UHID_INPUT(r3, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 14:20:08 executing program 5: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000100)=""/128, 0x80) 14:20:08 executing program 0: r0 = socket(0x2, 0x3, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x805) 14:20:08 executing program 0: r0 = socket(0x2, 0x3, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x805) 14:20:08 executing program 5: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000100)=""/128, 0x80) 14:20:08 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:08 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x44, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:08 executing program 3: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r4, &(0x7f0000000100)=""/128, 0x80) write$UHID_INPUT(r3, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 14:20:08 executing program 4: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r4, &(0x7f0000000100)=""/128, 0x80) write$UHID_INPUT(r3, 0x0, 0x0) 14:20:08 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x44, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:08 executing program 0: r0 = socket(0x2, 0x3, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x805) 14:20:08 executing program 5: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000100)=""/128, 0x80) 14:20:08 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:08 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x44, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:08 executing program 3: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r4, &(0x7f0000000100)=""/128, 0x80) write$UHID_INPUT(r3, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 14:20:08 executing program 4: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r3, &(0x7f0000000100)=""/128, 0x80) 14:20:09 executing program 0: socket(0x2, 0x3, 0x6) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x805) 14:20:09 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x44, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 14:20:09 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:09 executing program 5: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r3, &(0x7f0000000100)=""/128, 0x80) 14:20:09 executing program 3: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r4, &(0x7f0000000100)=""/128, 0x80) write$UHID_INPUT(r3, 0x0, 0x0) 14:20:09 executing program 4: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000100)=""/128, 0x80) 14:20:09 executing program 0: socket(0x2, 0x3, 0x6) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x805) [ 528.919676] binder: 11784:11795 ioctl c0306201 0 returned -14 14:20:09 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:09 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x44, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 14:20:09 executing program 5: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r2, &(0x7f0000000100)=""/128, 0x80) 14:20:09 executing program 3: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r3, &(0x7f0000000100)=""/128, 0x80) 14:20:09 executing program 0: socket(0x2, 0x3, 0x6) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x805) 14:20:09 executing program 4: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000100)=""/128, 0x80) [ 529.012354] binder: 11808:11811 ioctl c0306201 0 returned -14 [ 529.033139] binder: 11809:11812 ioctl c0306201 0 returned -14 14:20:09 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x44, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 14:20:09 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:09 executing program 0: r0 = socket(0x2, 0x3, 0x6) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, 0x0, 0x805) 14:20:09 executing program 5: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r2, &(0x7f0000000100)=""/128, 0x80) 14:20:09 executing program 3: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000100)=""/128, 0x80) [ 529.152047] binder: 11826:11833 ioctl c0306201 0 returned -14 [ 529.158923] binder: 11825:11837 ioctl c0306201 0 returned -14 14:20:09 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:09 executing program 4: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000100)=""/128, 0x80) 14:20:09 executing program 0: r0 = socket(0x2, 0x3, 0x6) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, 0x0, 0x805) 14:20:09 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x44, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:09 executing program 5: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, &(0x7f0000000100)=""/128, 0x80) 14:20:09 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x44, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:20:09 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 529.305212] binder: 11847:11859 ioctl c0306201 0 returned -14 14:20:09 executing program 0: r0 = socket(0x2, 0x3, 0x6) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, 0x0, 0x805) 14:20:09 executing program 4: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r3, &(0x7f0000000100)=""/128, 0x80) 14:20:09 executing program 3: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000100)=""/128, 0x80) 14:20:09 executing program 2: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r3, &(0x7f0000000100)=""/128, 0x80) 14:20:09 executing program 0: r0 = socket(0x2, 0x3, 0x6) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x805) 14:20:09 executing program 4: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r2, &(0x7f0000000100)=""/128, 0x80) 14:20:09 executing program 5: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, &(0x7f0000000100)=""/128, 0x80) [ 529.406419] binder: 11871:11874 ioctl c0306201 0 returned -14 [ 529.433562] binder: 11871:11874 ioctl c0306201 0 returned -14 14:20:09 executing program 0: r0 = socket(0x2, 0x3, 0x6) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x805) 14:20:09 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 14:20:09 executing program 3: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000100)=""/128, 0x80) 14:20:09 executing program 0: r0 = socket(0x2, 0x3, 0x6) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x805) 14:20:09 executing program 4: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r2, &(0x7f0000000100)=""/128, 0x80) 14:20:09 executing program 2: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r3, &(0x7f0000000100)=""/128, 0x80) 14:20:09 executing program 5: socket(0x2, 0x5, 0x9) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000100)=""/128, 0x80) 14:20:09 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 529.589765] binder: 11904:11910 ioctl c0306201 0 returned -14 [ 529.613637] binder: 11904:11910 ioctl c0306201 0 returned -14 14:20:09 executing program 0: r0 = socket(0x2, 0x3, 0x6) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x805) 14:20:09 executing program 3: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r3, &(0x7f0000000100)=""/128, 0x80) 14:20:09 executing program 2: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r3, &(0x7f0000000100)=""/128, 0x80) [ 529.681001] binder: 11919:11930 ioctl c0306201 0 returned -14 [ 529.700791] binder: 11919:11930 ioctl c0306201 0 returned -14 14:20:09 executing program 4: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, &(0x7f0000000100)=""/128, 0x80) 14:20:09 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000100)=""/128, 0x80) 14:20:09 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:10 executing program 0: r0 = socket(0x2, 0x3, 0x6) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 14:20:10 executing program 4: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, &(0x7f0000000100)=""/128, 0x80) 14:20:10 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r0, &(0x7f0000000100)=""/128, 0x80) [ 529.818351] binder: 11947:11953 ioctl c0306201 0 returned -14 14:20:10 executing program 3: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r2, &(0x7f0000000100)=""/128, 0x80) 14:20:10 executing program 0: r0 = socket(0x2, 0x3, 0x6) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 14:20:10 executing program 2: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000100)=""/128, 0x80) 14:20:10 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r0, &(0x7f0000000100)=""/128, 0x80) 14:20:10 executing program 4: socket(0x2, 0x5, 0x9) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000100)=""/128, 0x80) 14:20:10 executing program 0: r0 = socket(0x2, 0x3, 0x6) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 14:20:10 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r0, &(0x7f0000000100)=""/128, 0x80) 14:20:10 executing program 3: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r2, &(0x7f0000000100)=""/128, 0x80) 14:20:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:10 executing program 2: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000100)=""/128, 0x80) 14:20:10 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000100)=""/128, 0x80) 14:20:10 executing program 0: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r2, &(0x7f0000000100)=""/128, 0x80) 14:20:10 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000100)=""/128, 0x80) 14:20:10 executing program 3: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, &(0x7f0000000100)=""/128, 0x80) 14:20:10 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000100)=""/128, 0x80) 14:20:10 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r0, &(0x7f0000000100)=""/128, 0x80) 14:20:10 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000100)=""/128, 0x80) [ 530.717045] binder: 12013:12022 ioctl c0306201 0 returned -14 14:20:10 executing program 2: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000100)=""/128, 0x80) 14:20:10 executing program 3: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, &(0x7f0000000100)=""/128, 0x80) 14:20:10 executing program 0: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r2, &(0x7f0000000100)=""/128, 0x80) 14:20:11 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:11 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r0, &(0x7f0000000100)=""/128, 0x80) 14:20:11 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:11 executing program 2: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r3, &(0x7f0000000100)=""/128, 0x80) 14:20:11 executing program 0: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r2, &(0x7f0000000100)=""/128, 0x80) 14:20:11 executing program 3: socket(0x2, 0x5, 0x9) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000100)=""/128, 0x80) 14:20:11 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r0, &(0x7f0000000100)=""/128, 0x80) 14:20:11 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000100)=""/128, 0x80) 14:20:11 executing program 2: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r2, &(0x7f0000000100)=""/128, 0x80) 14:20:11 executing program 5: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r3, &(0x7f0000000100)=""/128, 0x80) 14:20:11 executing program 0: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000100)=""/128, 0x80) 14:20:11 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000100)=""/128, 0x80) [ 531.653854] binder: 12070:12082 ioctl c0306201 0 returned -14 14:20:12 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x40, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:12 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000100)=""/128, 0x80) 14:20:12 executing program 5: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r2, &(0x7f0000000100)=""/128, 0x80) 14:20:12 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r0, &(0x7f0000000100)=""/128, 0x80) 14:20:12 executing program 2: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r2, &(0x7f0000000100)=""/128, 0x80) 14:20:12 executing program 0: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000100)=""/128, 0x80) 14:20:12 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r0, &(0x7f0000000100)=""/128, 0x80) 14:20:12 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000100)=""/128, 0x80) 14:20:12 executing program 2: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, &(0x7f0000000100)=""/128, 0x80) [ 532.521353] binder: 12123:12132 ioctl c0306201 0 returned -14 14:20:12 executing program 5: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r2, &(0x7f0000000100)=""/128, 0x80) 14:20:12 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r0, &(0x7f0000000100)=""/128, 0x80) 14:20:12 executing program 0: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000100)=""/128, 0x80) 14:20:13 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x3c, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:13 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:13 executing program 2: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, &(0x7f0000000100)=""/128, 0x80) 14:20:13 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000100)=""/128, 0x80) 14:20:13 executing program 5: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, &(0x7f0000000100)=""/128, 0x80) 14:20:13 executing program 0: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r2, &(0x7f0000000100)=""/128, 0x80) 14:20:13 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000100)=""/128, 0x80) 14:20:13 executing program 4: socket(0x2, 0x5, 0x9) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000100)=""/128, 0x80) [ 533.413387] binder: 12175:12184 ioctl c0306201 0 returned -14 14:20:13 executing program 2: socket(0x2, 0x5, 0x9) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000100)=""/128, 0x80) 14:20:13 executing program 0: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, &(0x7f0000000100)=""/128, 0x80) 14:20:13 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000100)=""/128, 0x80) 14:20:13 executing program 5: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, &(0x7f0000000100)=""/128, 0x80) 14:20:14 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x3c, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:14 executing program 0: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, &(0x7f0000000100)=""/128, 0x80) 14:20:14 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:14 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000100)=""/128, 0x80) 14:20:14 executing program 4: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r2, &(0x7f0000000100)=""/128, 0x80) 14:20:14 executing program 5: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r2, &(0x7f0000000100)=""/128, 0x80) 14:20:14 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r0, &(0x7f0000000100)=""/128, 0x80) 14:20:14 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 14:20:14 executing program 0: socket(0x2, 0x5, 0x9) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000100)=""/128, 0x80) [ 534.298472] binder: 12231:12240 ioctl c0306201 0 returned -14 14:20:14 executing program 4: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r4, &(0x7f0000000100)=""/128, 0x80) write$UHID_INPUT(r3, 0x0, 0x0) 14:20:14 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x3c, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @dead_binder_done], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:14 executing program 5: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r3, &(0x7f0000000100)=""/128, 0x80) 14:20:14 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r0, &(0x7f0000000100)=""/128, 0x80) [ 534.352848] binder: 12244:12251 ioctl c0306201 0 returned -14 [ 534.389577] binder: 12244:12251 ioctl c0306201 0 returned -14 14:20:14 executing program 3: r0 = socket(0x2, 0x5, 0x9) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r4, &(0x7f0000000100)=""/128, 0x80) write$UHID_INPUT(r3, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 14:20:14 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r0, &(0x7f0000000100)=""/128, 0x80) [ 534.462633] binder: 12256:12269 ioctl c0306201 0 returned -14 14:20:14 executing program 4: r0 = socket(0x2, 0x3, 0x9) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040)=0x1, 0x4) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000140)=0x1) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000)='802.15.4 MAC\x00', 0xffffffffffffffff) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000180)=0x8, 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000080), 0x4) connect$bt_sco(r0, 0x0, 0x0) 14:20:14 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000100)=""/128, 0x80) 14:20:14 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000100)=""/128, 0x80) 14:20:14 executing program 5 (fault-call:1 fault-nth:0): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:14 executing program 4 (fault-call:1 fault-nth:0): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:14 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000100)=""/128, 0x80) 14:20:14 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r0, &(0x7f0000000100)=""/128, 0x80) [ 534.612681] FAULT_INJECTION: forcing a failure. [ 534.612681] name failslab, interval 1, probability 0, space 0, times 0 [ 534.650700] CPU: 0 PID: 12293 Comm: syz-executor.5 Not tainted 4.14.228-syzkaller #0 [ 534.658718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 534.668089] Call Trace: [ 534.670688] dump_stack+0x1b2/0x281 [ 534.674370] should_fail.cold+0x10a/0x149 [ 534.678537] should_failslab+0xd6/0x130 [ 534.682530] kmem_cache_alloc_node_trace+0x25a/0x400 [ 534.687651] __kmalloc_node+0x38/0x70 [ 534.691497] kvmalloc_node+0x46/0xd0 [ 534.695245] seq_read+0x882/0x1120 [ 534.698792] ? lock_acquire+0x170/0x3f0 [ 534.702781] ? seq_lseek+0x3d0/0x3d0 [ 534.706501] ? lock_acquire+0x170/0x3f0 [ 534.710480] ? full_proxy_read+0x65/0x1a0 [ 534.714667] full_proxy_read+0xfb/0x1a0 [ 534.718654] __vfs_read+0xe4/0x620 [ 534.722212] ? full_proxy_unlocked_ioctl+0x190/0x190 [ 534.727326] ? vfs_copy_file_range+0x9b0/0x9b0 [ 534.731916] ? common_file_perm+0x3ee/0x580 [ 534.736257] ? security_file_permission+0x82/0x1e0 [ 534.741206] ? rw_verify_area+0xe1/0x2a0 [ 534.745327] vfs_read+0x139/0x340 [ 534.748790] SyS_read+0xf2/0x210 [ 534.752165] ? kernel_write+0x110/0x110 [ 534.756144] ? __do_page_fault+0x159/0xad0 [ 534.760408] ? do_syscall_64+0x4c/0x640 [ 534.764387] ? kernel_write+0x110/0x110 [ 534.768365] do_syscall_64+0x1d5/0x640 [ 534.772266] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 534.777566] RIP: 0033:0x466459 [ 534.780754] RSP: 002b:00007f853d40b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 534.788561] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 534.795837] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 534.803144] RBP: 00007f853d40b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 534.810423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.817784] R13: 00007fffe9e1862f R14: 00007f853d40b300 R15: 0000000000022000 14:20:15 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @register_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:15 executing program 3 (fault-call:1 fault-nth:0): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:15 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000100)=""/128, 0x80) 14:20:15 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x100, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r3, 0x0, 0x0) read$snapshot(r3, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="1a4f000000c29e2fdbeb4f0e4a92f19143df7eca47bec55dd3e3082252a006"], &(0x7f00000000c0)=0x22) 14:20:15 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r0, &(0x7f0000000100)=""/128, 0x80) 14:20:15 executing program 5 (fault-call:1 fault-nth:1): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:15 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000040)) [ 535.320308] FAULT_INJECTION: forcing a failure. [ 535.320308] name failslab, interval 1, probability 0, space 0, times 0 [ 535.350025] CPU: 1 PID: 12316 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 535.357948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 535.361066] binder: 12319:12323 ioctl c0306201 0 returned -14 [ 535.367308] Call Trace: [ 535.367341] dump_stack+0x1b2/0x281 [ 535.367355] should_fail.cold+0x10a/0x149 [ 535.367368] should_failslab+0xd6/0x130 [ 535.367380] kmem_cache_alloc_node_trace+0x25a/0x400 [ 535.367392] __kmalloc_node+0x38/0x70 [ 535.367403] kvmalloc_node+0x46/0xd0 [ 535.367414] seq_read+0x882/0x1120 [ 535.367425] ? lock_acquire+0x170/0x3f0 [ 535.367441] ? seq_lseek+0x3d0/0x3d0 [ 535.367449] ? lock_acquire+0x170/0x3f0 [ 535.367462] ? full_proxy_read+0x65/0x1a0 14:20:15 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) [ 535.419610] full_proxy_read+0xfb/0x1a0 [ 535.423597] __vfs_read+0xe4/0x620 [ 535.427142] ? full_proxy_unlocked_ioctl+0x190/0x190 [ 535.432255] ? vfs_copy_file_range+0x9b0/0x9b0 [ 535.437017] ? common_file_perm+0x3ee/0x580 [ 535.441370] ? security_file_permission+0x82/0x1e0 [ 535.446304] ? rw_verify_area+0xe1/0x2a0 [ 535.450374] vfs_read+0x139/0x340 [ 535.453845] SyS_read+0xf2/0x210 [ 535.457239] ? kernel_write+0x110/0x110 [ 535.461220] ? __do_page_fault+0x159/0xad0 [ 535.465456] ? do_syscall_64+0x4c/0x640 14:20:15 executing program 2 (fault-call:1 fault-nth:0): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) [ 535.469434] ? kernel_write+0x110/0x110 [ 535.473442] do_syscall_64+0x1d5/0x640 [ 535.477430] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 535.482620] RIP: 0033:0x466459 [ 535.485817] RSP: 002b:00007ff30885e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 535.493651] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 535.500928] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 535.506097] FAULT_INJECTION: forcing a failure. [ 535.506097] name failslab, interval 1, probability 0, space 0, times 0 14:20:15 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x18) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x1c, 0x0, &(0x7f0000000000)=[@dead_binder_done, @request_death], 0x4f, 0x0, &(0x7f00000000c0)="d87fa3a618eda7d52f4bacee0fb0af47fdd47d21cd1c6ac8e70e3ca451a8d43c47cea7ff5184c08fd46ac62b73933b2075260fd316c695faeb43a7d801f19ebf4c6878ee81fc59f40557007d39c3b3"}) 14:20:15 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r0, &(0x7f0000000100)=""/128, 0x80) 14:20:15 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r1) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x3e}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044082}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="140129bd7000fedbdf252a0000000a0001007770616e34000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0xc0000) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r2, 0x0, 0x0) [ 535.508200] RBP: 00007ff30885e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 535.508206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.508212] R13: 00007ffe97c51baf R14: 00007ff30885e300 R15: 0000000000022000 [ 535.602747] CPU: 0 PID: 12334 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 535.610680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 535.620040] Call Trace: [ 535.622639] dump_stack+0x1b2/0x281 [ 535.626276] should_fail.cold+0x10a/0x149 [ 535.630436] should_failslab+0xd6/0x130 [ 535.634434] kmem_cache_alloc_node_trace+0x25a/0x400 [ 535.639584] __kmalloc_node+0x38/0x70 [ 535.643429] kvmalloc_node+0x46/0xd0 [ 535.647182] seq_read+0x882/0x1120 [ 535.650732] ? lock_acquire+0x170/0x3f0 [ 535.654724] ? seq_lseek+0x3d0/0x3d0 [ 535.658444] ? lock_acquire+0x170/0x3f0 [ 535.662436] ? full_proxy_read+0x65/0x1a0 [ 535.666638] full_proxy_read+0xfb/0x1a0 [ 535.670625] __vfs_read+0xe4/0x620 [ 535.674272] ? full_proxy_unlocked_ioctl+0x190/0x190 [ 535.679396] ? vfs_copy_file_range+0x9b0/0x9b0 [ 535.684000] ? common_file_perm+0x3ee/0x580 [ 535.688367] ? security_file_permission+0x82/0x1e0 [ 535.693316] ? rw_verify_area+0xe1/0x2a0 [ 535.697421] vfs_read+0x139/0x340 [ 535.700885] SyS_read+0xf2/0x210 [ 535.704250] ? kernel_write+0x110/0x110 [ 535.708219] ? __do_page_fault+0x159/0xad0 [ 535.712463] ? do_syscall_64+0x4c/0x640 [ 535.716443] ? kernel_write+0x110/0x110 [ 535.720434] do_syscall_64+0x1d5/0x640 [ 535.724311] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 535.729492] RIP: 0033:0x466459 [ 535.732675] RSP: 002b:00007fcf65f76188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 535.740614] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 535.747969] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 535.755229] RBP: 00007fcf65f761d0 R08: 0000000000000000 R09: 0000000000000000 [ 535.762763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.770115] R13: 00007fff97f07f4f R14: 00007fcf65f76300 R15: 0000000000022000 14:20:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x30, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:16 executing program 3 (fault-call:1 fault-nth:1): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:16 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000100)=""/128, 0x80) 14:20:16 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:16 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xae}, 0x8) read$snapshot(r0, 0x0, 0x0) 14:20:16 executing program 2 (fault-call:1 fault-nth:1): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:16 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000000)) 14:20:16 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r2, 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, &(0x7f0000000000)={0x4f44, 0x6}) 14:20:16 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000100)=""/128, 0x80) 14:20:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x9c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x64, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f2404d2b4e2b0582c2b96e984e623c2007af2eab8ce5021565f642aa21a65e5b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b273ea80785e14a639526a6bdd4ef32264fcbbb019b6c5f78bb4d2ff1f2a1bee"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x32}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x9c}}, 0x20004804) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x30, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:16 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f00000000c0), 0x4) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) read$snapshot(r0, 0x0, 0x0) [ 536.277912] binder: 12365:12374 ioctl c0306201 0 returned -14 14:20:16 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0)='batadv\x00', r1) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="700000003c3b3ff989b1d012bedb665542cdbf8a6a342d98dac9f9ae0618f776abb42dd1efd65f20bba70bf4d6303fbca2f2924b2499d38906af7470fccff2c5d3312cc8588763c4cfc5c6b004fc18", @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25100000000a000900aaaaaaaaaaaa000008002b008e39000008003c00090000000a0009000180c2000001000008003a000000f80705002e000100000008003200000000000a000900000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0500290001000000"], 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0xfe, "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"}, &(0x7f0000000000)=0x106) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000200)={r4, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000040)=0x84) 14:20:17 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000100)=""/128, 0x80) 14:20:17 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) 14:20:17 executing program 4: ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x30, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:17 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:17 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x7fffffff) read$snapshot(r0, 0x0, 0x0) 14:20:17 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:17 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x8, 0x7, 0x8, 0x80, 0x2, 0x9, 0x1f, 0x4, 0x1, 0x73, 0x7f, 0x8, 0x1e, 0x7f}, 0xe) ioctl$SNAPSHOT_FREE(r2, 0x3305) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(gcm-aes-ce)\x00'}, 0x58) 14:20:17 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0xfc, 0x7, 0x4, 0x0, 0x5, 0x2, 0x6, 0x8, 0x9, 0xff, 0x78, 0x20, 0x44, 0x8}, 0xe) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) read$snapshot(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0xf7, 0x6, 0xe0, 0x6, 0x1, 0x20, 0x4, 0x7, 0x0, 0x9c, 0x6, 0x3, 0x8, 0x40}, 0xe) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000140)=""/18, &(0x7f0000000180)=0x12) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) write$UHID_GET_REPORT_REPLY(r1, &(0x7f00000000c0)={0xa, {0x4, 0x7f, 0x6}}, 0xa) 14:20:17 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0xba, "cb029eb3882eb452ff1eebcda3ca30ae9766084422d6d6740f5e0c321a007a1b2b78b86a0398167efe3dbf686a7f64542d0346e909bf85f136c92ca1bc955564cb38190a7a3579f3c96c9e582cf5fc5dee6582823cce6b4b3ad945882dc8fd351111282b9b0d06c6d7e7d6744560875c57de2fd2b1761dcb05cf08715ec0774f5960b7f44bdeafe20399dd66964c68eecc1643531c6d444d44b0dab6b6ae0dea2884f3dfc2577ebb21aba1605271cfb7376ae6a0a94d2666c4da"}, &(0x7f0000000040)=0xc2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000)={r1, 0x80000000}, &(0x7f00000001c0)=0x8) read$snapshot(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000240)={0xa5, 0x9, 0x7, 0x20, 0x1, 0x3, 0x6, 0x0, 0xb9, 0xf5, 0x2, 0x1f, 0x0, 0x1}, 0x41) 14:20:17 executing program 3: read$snapshot(0xffffffffffffffff, 0x0, 0xff9d) 14:20:17 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f00000000c0), 0x4) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) read$snapshot(r0, 0x0, 0x0) [ 537.196414] binder: 12412:12421 ioctl c0306201 0 returned -14 14:20:17 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:17 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}}, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x9, @loopback, 0xfffffffd}, @in6={0xa, 0x4e21, 0x5, @ipv4={[], [], @loopback}, 0x81}, @in6={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, [], 0xa}, 0x20}, @in6={0xa, 0x4e20, 0x10001, @private2={0xfc, 0x2, [], 0x1}, 0xfffffffa}, @in6={0xa, 0x4e23, 0x6, @loopback, 0x81}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x7fff, @dev={0xfe, 0x80, [], 0x2a}, 0x1b}, @in6={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x800}], 0xe4) 14:20:17 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:18 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x30, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x4000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x1bc, 0x0, 0x121, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_KEY={0x188, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x84, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x60, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x5555555555540504}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80000000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}]}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x81}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "664d212b91a018ee2a5a27bb0e5fa8dac5ddb97df4e02fd8e43bf76b18ff806e"}, @NL802154_KEY_ATTR_ID={0x8c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x40}, 0x800) 14:20:18 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f00000000c0), 0x4) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) read$snapshot(r0, 0x0, 0x0) 14:20:18 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = socket(0x4, 0x2, 0x40) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x8ac}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000040)={r2, @in6={{0xa, 0x4e20, 0x0, @local, 0x80}}, 0x4, 0x8e}, &(0x7f0000000100)=0x90) read$snapshot(r0, 0x0, 0x0) 14:20:18 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f0000000000)=0x4) read$snapshot(r0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f00000000c0)=""/130) 14:20:18 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000000c0)={0xa, {0x2, 0xb6, 0x8}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x3, 0x2, 0x7, 0x0, 0x1}}) 14:20:18 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}}, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x9, @loopback, 0xfffffffd}, @in6={0xa, 0x4e21, 0x5, @ipv4={[], [], @loopback}, 0x81}, @in6={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, [], 0xa}, 0x20}, @in6={0xa, 0x4e20, 0x10001, @private2={0xfc, 0x2, [], 0x1}, 0xfffffffa}, @in6={0xa, 0x4e23, 0x6, @loopback, 0x81}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x7fff, @dev={0xfe, 0x80, [], 0x2a}, 0x1b}, @in6={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x800}], 0xe4) 14:20:18 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:18 executing program 3: getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1ff, 0x205, 0x3, 0x7}, &(0x7f0000000040)=0x10) read$snapshot(0xffffffffffffffff, 0x0, 0x0) [ 538.060125] binder: 12467:12473 ioctl c0306201 0 returned -14 14:20:18 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:18 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x91, 0x0, &(0x7f00000000c0)="c1701f30b102c95bb3b628702e9ebb4bf052c1caf1f288bafe7006d3e10e5f30a3407a3c834aec556f09815b49ce864fe73b45186da7f2f7bc41aeb8c8ffb793a71e273ff93af48ab548e989f321d7c2570158bf86e54e97073fef0fed92a729a2f8d10a0e0b53b5fd454d229860b268ebb6d492620b8d557c11345fd4eb61f5d57695950d73f3602baf7ac36518d4154b"}) 14:20:18 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}}, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x9, @loopback, 0xfffffffd}, @in6={0xa, 0x4e21, 0x5, @ipv4={[], [], @loopback}, 0x81}, @in6={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, [], 0xa}, 0x20}, @in6={0xa, 0x4e20, 0x10001, @private2={0xfc, 0x2, [], 0x1}, 0xfffffffa}, @in6={0xa, 0x4e23, 0x6, @loopback, 0x81}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x7fff, @dev={0xfe, 0x80, [], 0x2a}, 0x1b}, @in6={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x800}], 0xe4) 14:20:19 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000000), &(0x7f0000000040)=0x8) 14:20:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000000)=[@release, @increfs_done={0x40106308, 0x1}, @register_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:19 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 14:20:19 executing program 3: r0 = gettid() syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) r1 = getpgrp(0x0) rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000140)) rt_tgsigqueueinfo(r0, 0x0, 0x39, &(0x7f0000000080)={0x2a, 0x9, 0x1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r2, 0x0, 0x0) 14:20:19 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}}, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x9, @loopback, 0xfffffffd}, @in6={0xa, 0x4e21, 0x5, @ipv4={[], [], @loopback}, 0x81}, @in6={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, [], 0xa}, 0x20}, @in6={0xa, 0x4e20, 0x10001, @private2={0xfc, 0x2, [], 0x1}, 0xfffffffa}, @in6={0xa, 0x4e23, 0x6, @loopback, 0x81}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x7fff, @dev={0xfe, 0x80, [], 0x2a}, 0x1b}, @in6={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x800}], 0xe4) 14:20:19 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x6) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x48, 0x0, 0x120, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x48}, 0x1, 0x0, 0x0, 0x400}, 0x1) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r4, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x7ff, @mcast1, 0x6}}, 0x9, 0x1}, &(0x7f0000000180)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000001c0)={r5, 0x4}, 0x8) write$UHID_INPUT(r3, 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) accept$alg(r6, 0x0, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uhid\x00', 0x802, 0x0) write$UHID_INPUT2(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="0c000000fa006d74d2c8154aaafa152e0292fb6afcc60deb91261bc7098c591a8570ae1731e784dedb7579509a444a70f838ec5372496875074af58467cc8b3db6a9752c78a5c9d3beca9dfecdca3fecc045e166783873d7dd5ade63f159e23638cee7335593cfd6a80a929e3767f78a98961aa393b0e4323f8149fbcc5a336b98c4f423be3da639ecb1eccdf416887069a786d2ddaff1f76a5f9d29af9a5ed9b20455e86ad65002d1f026ed4a616cbe85b72d6cf5683f689dc21ca8470bfa2a76b4019e65c0411f0100000000000000583236555e727ee4109169a96c356e9f7fb198652c5bdf8f8a52213e7440dc75c000"/256], 0x100) write$UHID_INPUT(r7, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x6}, 0x8) read$snapshot(r1, 0x0, 0x0) 14:20:19 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}}, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) 14:20:19 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:19 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000180)=0x4) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000200), &(0x7f0000000240)=0x4) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r3, 0x0, 0x0) read$snapshot(r3, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100)='l2tp\x00', r0) 14:20:19 executing program 4: ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f00000000c0)=""/86) read$snapshot(0xffffffffffffffff, 0x0, 0x0) 14:20:19 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-neonbs\x00'}, 0x58) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x6, &(0x7f0000000200)=@raw=[@btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9f1}], &(0x7f0000000240)='GPL\x00', 0x5, 0x7b, &(0x7f0000000280)=""/123, 0x40f00, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xf, 0x2, 0x4}, 0x10}, 0x78) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001480)=@bpf_ext={0x1c, 0x2, &(0x7f00000000c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x12}], &(0x7f0000000100)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000480)=""/4096, 0x41000, 0x1, [], r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x7, 0xa65, 0xfff}, 0x10, 0x15a11, r3}, 0x78) read$snapshot(r0, 0x0, 0x0) [ 538.984492] binder: 12510:12521 ioctl c0306201 0 returned -14 14:20:19 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x7c, 0x0, &(0x7f0000000240)=[@decrefs={0x40046307, 0x3}, @request_death={0x400c630e, 0x1}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x10b, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/221, 0xdd, 0x0, 0x2f}, @fda={0x66646185, 0x6, 0x0, 0x100000003d}}, &(0x7f0000000040)={0x0, 0x18, 0x40}}, 0x1000}, @request_death={0x400c630e, 0x2}, @decrefs={0x40046307, 0x3}], 0xb8, 0x0, &(0x7f00000002c0)="f7b02bbae29573e1d485e6b7dee132d39506749ebf3f3a08fdd76b6a1402c25f1e679cdb3b5e9d9bddba1a9c742077685702154b3c034899e4d4754a4c4fe95ff1ff7d932aeccabe01e3c7c3e106fc3aa546c4c88a4abafb8ee45d3c0f001704c384f10a54fa40582bede5cf53ae656d320585ac7e9020df9501a6982268271120707eba2d68bdad15fd8528bc3fef24c4aed71c21a12034d29bbe30fae9620a36415c0fb289c3836bf5a2f2606bf0f56cedcfe44dc4ad21"}) read$snapshot(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000), 0x8) socket$inet6_udplite(0xa, 0x2, 0x88) 14:20:19 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}}, 0x0) 14:20:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000000)=[@release, @register_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:19 executing program 4: getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0xe01e, @private1, 0x5}}, 0x8000, 0x8}, &(0x7f0000000000)=0x90) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e22, @broadcast}}, 0x9}, &(0x7f0000000280)=0x90) read$snapshot(r0, 0x0, 0x0) 14:20:19 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x3) read$snapshot(r0, 0x0, 0x0) 14:20:19 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f00000000c0)=""/239, &(0x7f0000000000)=0xef) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0)='l2tp\x00', r0) r2 = socket(0x6, 0x800, 0x3) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280)='l2tp\x00', r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x400c801) 14:20:19 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x109003, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000040)={0x6, 0x4}) 14:20:19 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 14:20:20 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x11b081) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f00000000c0)) 14:20:20 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x24) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000001480)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x1008) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000100)={0x8000, 0xb97b, 0x8, 0x5c80ac6d, 0xffffff0c, 0x20, 0x4, 0x8001, r3}, &(0x7f0000000140)=0x20) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000080)=0xffffffbe) read$snapshot(r0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000480)=""/4096, &(0x7f0000000040)=0x1000) 14:20:20 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f00000000c0)={0x8, {"31e96e4f4d4f5d15ff9f0bc1d6a56af767702d810e57396851bfdca78703410fe55e70e7c71bd6dd15a8b0c617790eea6b703136e0df9b0c3bd0a2271206d9ad70471ff7ababab947458f9a03c8f8c34fd27193a39855b15ca90885a1fd2b83d27fd0267c3fbe780f31f4f0090a97298c7b9b489fff554c1d891150d39fa2dc8b9c6fc381945dfea948903bf05a461aceef2bfd6b7c655090dc8416c1f66ca5a3abc8a40e2d67c794bf0a68ea1f04ea32eafc86fec675c3a6084926b521540ee9095dadff487ea4dc191ef5f6dfef7374b12203942150d769ff8542a30c46540fc4cb9b0992ba6f93458d83f473045e99a9bc8531442c084635eb0c45725b3ec0ee913cdb8e2913086084fe9571261613d5645a3ffc349139fb0e3f415ef9d6fbf9b92e27fc580f42582a9e2d19a2f4f443b1012e4d3c3268be6f93507d8b3f3fc9b779b91c8304f482aa66f4d6ca21de9d1455452474ca259fd919959143ff54ffe0c9b6e801deae4f9301a7190d646e1989e2dcbd47113427eea2de9a91fe45e7a1dab84d205aeb541e65add0aa8119010f1a36209a9679b7d032e1e21ea3d27c85bf6ef4e4ba5f14ff4a4c1a6e7e5332137d2dca73b0c8fa82da31abfbe9fee9f39eb78baed9dcd22dfe9094eb7356f8ca48c8adc98665927fffb642e3360550ad9f962cc07bc752810f30619d555979def53593c097e67e4b3175e410d9e619c78da6aa443f5f5731233c44d7cbc8138987d9a642fa980cf83fcc5354dcd16aaf92c8ad77ce7e05b9d96e566b0973e790bcadbb13078d5a9ad17d94cbd35e72a4c79590ac63559714e5e07b9551d62a82bff3f299733ff7c11e9b938c6d407572192a3af5c4c4264be683ec40ba7667c801bf2a8e86faac0a0b81db39fbca552806548a1b186bcf34402a7f8948a548fb0fd8a20de417f5869f960b6b71959b0079d4f0e9d1dc0941d3fbeaa56e7654002957b4b64153579aa137779e40fe33688fbcdc3272e2cdea8be4d8c578658a22839e1cc7bc52ee22f19e4361770fc6bc5bed169c62cf05de605a0c6da225314e191bfb7d61585b7943059d173101221ddd129d6b5546e0d735407ace53c4d290c6542c6dfa47988de6448043b0d525b188d0584b2f03b702ff0fabc6c99e037e33b42984d1cdf3486ce5b4aa6ace4f729a4f682ab65d0ade9f5481e3657d0b07e61bc1a8e29940935a583bba563077575e4e1d0591d3b4e6668fc1a9a032b4cfa2056edc2fcfd2559d458dc33cb42f95fffe0739c0df254a371524d03e3f8b56464390bc83d6cb5284bda5aeb9025cc2a42c6bb70276c25c7b76603d4a1ea9e0459e49bb0f61a522e7754fda0a5e571db71159936480e66931ba34ec0c5a8826353cf3ed76aac160c92686c71b500754dad0be67b3106153d0c238d47a880ed0f27c77bd162a9f38c05278a0302eaaf0ad0e00b5dc764795b56d641b6a73249f4ba7864e245fd9bb18d13c64bd3db871484202f63adc75872e8b3ff3aaa99f7e7a2699deb0b183b6c931f2e1dc2a3ba3046084954c244f0288de7319f3e4ad34a83e0ff00124983c5473756bd97f4498ae806000f849ca63cf9f30078269c9ff31049117adaecbe4b2b9d49e8b1ae247985f7d3d4a3579abc3e3b087372444ec43ab111eb71b79f6c7cbe1082eb0e452fbe6e004121aebb1330042f784d3951cc6a6b5dee6fa47d0f80f02cd7dbf80b31a80940e8f25bd9ba6d3c5fa50621658dcd19fe08e009af1eb1ce430b651828e8abf580c5935df118b38bfcf6c545b173d8ceea27fa89700e9dc3dba6a058888b5e35649892f7c7334aaf7d726942ec44861c452093410f8dd3cfbb519addba44c17ea0930e24a55aff1a6a4ca47504c0f5519cf49290f671571eca7037165fb5b90b30c9db69fe400c59f95070d7844bf0fede5fd97ad920825e5b41b16028a5745a96546e20bcd8ccf41c920bc000afcdafe5a5890d7b0a85fe2f0dca82b42cf894fb01b54b1caf46e80ae2c8e89160bb1d44efb4d8de691789e1b5576a6ef2babc5c76bb1fa094b49bf467539b8da6ecd9fc2ad52be46196ebaa937fc3af35ae3ac57b2abe0ae50b9a8b300327f32c8895cc3ce518b5ad1349702be70081656e40b50cfa35ac2171fed127031a7d8c22b7bdbe3249863cf30e768c1c9270f339933e129320512774a0977c913f5de26ffae65bb3e4253f87484f2258db1d5d5a1f528e2ff9d42a31219081f91c410e1300550a3f253038c26c8b204c19c2b2ccdccccdfba7cd0395e46572f12426867d35dc9273cef50367975dfc3b1fe1552cfb5ba6c453d52ff7c3150273fb54e21ed93cdb510ad14aeb9240ef6e92d485cffc12926ce17f63be8539d9a7c16a56969580071af0b7afce7505cc868219d86805710734a4006c50482920ff2bb5f2d3babd6ec03fe4e8cb0b598b5c9d2675acece981c77b68de549763d12f1fb7bf7ebfb49f68e90a358354833cde27a078235b6a6f9480d5f3e81bbce26f36c4bb167f2b26c49aa129df8181bd36484a3cfb22f8df6ced5cb6412287c4c66d5eda5e9682aeb6112fd118a17873749d7005ebafe2d8b78c9f937be7ed5644be68eb7658283398de1886f9742cf5992105ed0494c6e867303ee4c3be625065fd8c9b80b703c6576bb66ac7708b06cb79af84bce2ce6f8a3b023fb3e409c63e27646872721ceee7d3e0a9ffb214afe02e401560be6c4bfff764d16456dee4647353cad76cf1a4226353d78288f570f006772462c65f5b701831c309c8c675a30bce09d647644b810dc482cbab8adb8027d0294c6a0e2b8e7d17b0dce79d644b5d4cf3259292728e4386eddd83a42e53e44caf547ac06aeb8498511e8d374b2570885c95684a1e4772e9ed7ccad0144dde287e7872f5e746642e55c5d3e9d458c3ef3615f74dce0a514ef3a2ecb6078875a20c152412ac6dc0f63b6ca3d17b9a67c9f99bb7ebc7f16c3ab2dceb12d557c523d62b2b65236845ff8984cb9b301016ae27a4c153f831ed6d31f3394b7ee3d5f1c62fbfc997e7a8932a0b5eec1d45285b1f7fa23d8153b07b8987030762a25c85be87c4004ce7bcfd11cb8f330dcc223d5416b5c9ac71302f273def762bfd272520a6a339ed4cef67e8bce7fbe795168df5593f59d32a651c995b66c401958561fa0531ed289e573dbb45e0aefed6d509ef038946603660c702431cd70cf720e31cf03725fe540ea74473165d4cf0bd3ae245d481db5ba23366c72359bdce3e48f16107707fc248df3936a5ebcf4002d0fc3936e1b6262a4dfa611e5f46717e399c23ff791449722fa38a05bde5263f3421cbc9c37a9578f67990efdfafa33bdfed5405278048c75f22ce99ce820b1b813a56575229bd096edf0b0588d1795a52a94a9da1c0e58ea4af547afe11ec41b04f5db16e7fa8177aaccc84d260bbb62e46ce617bf50ef243f67074594b200a47fc17aff7982b0042f785f884cd2fd10f41e8dc9e31ddaf14f2e5a040dc298ac3a6d7aa6a9058025a2e5848eec760459b49d727aee30e2da4d07e652d0228f9edd36c221fd4fb7e013c6e5a908f2d16eb69ae6fd546579b322c5922013b7f4aebba88e2dc4761a7e529cd69874d5267e29da8a530f1f48c663d2e8d99fcc99c481e38c552f28c87caaae5c0806bf7112c1d67476170333edb2ae1fe82aba3be715e2eb5710757d0600c262f3410ca73ef899c8c34affe2dc91407c83b051f2c9775569f246ef331b4dced9eae1b60349afaad4c3f988eec5f34b3f4dae095689168a1976bab113481469b0a8186868f4dc5736f5ddb3f9f52e64f9d006dc885afc9feba296d6148a520e28349b11143e173287cd260dd2b8ac7c2212995e3def9b4033cd4cf1f4ae1072c311f23b21a51f266a0415239ec2d668d456533efbc641aeb15a9019389b62cd385c7cf5eaeb874986d6e0791f98fcccba2685cb16a6a011f771b467686c26f1cd04dfe63a56b915ec2cf2837c990a211c9501c64df5c3bdc01785b571026c1a4f28e2f822a974d5026eef14aca43108a94bf574000002fa6ada798d1fa411e46b90a7acc86da629553b3c515fe15d423847b24ce0555345e1e678f513294913860850943671ef97dc61ee6b6d26bea82d86eee1e3131d3308e0266c2dbe6c052123a4b5ece04b4671aabb51e41d80c4c58f0a8c6bbb1188f37e9f3543619e3d62f4ca4a8a87203cf253a7134c16b73bab10554cc937e37cb7aa590694c0a95cc4bf3a2ef36874351a4fcba5ec3f935822a420b65636aaea3d420ea69b398f9eb5fa521ea1d03337b670ab7f4d78027a02dd1e7daa6aacf2490059a08d3f015c5506f982ec0ab53ddbda8f8f68b79a80f5cad7789264b423cc853282a92f7e9eaff90b162ff2934638ae58689fbe1a427d1f5b7286ffd04706ffbe96f4b06b16a1b23ec6d2b6aae9e7bf3fe3303279a4148f48ac5b7406344719b156dfb28e23daad2cd8cb1a2fed98f105b1cb86fc21ed15d4fa68b8656becfb8ab6d817c50aa034465ff4a4e981b92ff35a49e05c8bfd5bdde09d02c3369d82103857f4efe3b8069ba1cb5444da5c3e6e7211e4b20ab11346cd1401dc9a2f3942da2e89d581168cd6588678d2b840a13347cc880be8aa72b890b809e29dabd500defe00a954004b1c99ab228dd1d01b0608abc9ae896eccc6da699e701eda5d46bff99f863aaeadee32bbc19d24cf7f0e3c5929bb337eee552762874ae8fb28dc743d792a5d92e805f91db18b2e37e1a8c1457f9842e50327f6dc61a15490c8b79103f28b42aeea15465e1e49572df778ce2ff18d253d378d456d82d8a25bac16a85f572436b8e47582f30499e25139ad3defd9d39ab8dc736ade8ec7e0052eb676c427a13b5ac01e0793ed9d67dacc10275b09107e5695a8466007af546c22ad030e5bc4c81ca4f8964e432c2861d9e37029b537183b6a537bf72eaa36c0c533819b5af8381311b77d3ef399b8fc1da4b000dd21f308057eb96b93abdb98670d60f6389d3d0c5f28a570f35054386726f4fc7ec56ed30ad77854ccbb81507f40496a39f7017e3907516199db7272816082c6b0cb215af3eab76a9f4e44df288592fd02868fe2b90d589fe6bc6538c6deb8b3d0d15d01c39e5c3fb89bc870368843fad50e4e3d3711c9d70f9967c53c480519167c8e2fcd57cfb0fb0092678798060d315dd22c36ba694022c0b47ceb3b8f5ff9d82a01806d07e7b738567783bc465d6e788383b3e2936d71d5009e5d974634de7a1e5ab64294f774349467896314e7b62fc220856c8b0d1ae19703ac15dd35780fd9476541541a547763422330c322a7d911c558431e86270c4327c6770f18978cd55de80c2035a46f86a486c48cc7d5e7d2275e65736e552554fb8bc1574142c48a88ea3fc5b84429ede658af8ee9dc628d756eac92cc999707cfcef1522e1c34a824b4f61b534e240abbb56b9f0cac31e1ae215c71203d478ef60260522b08eb20f2ab49b5627274683a39a5dcc95d24d1981e6d498ebd9a7be3763f340d996e7d1b04118b68572e73b50bec41949f411b2c0df013814e2fd00165b3f12fb864dcc0715e1cf09b1bbbed596f78f88a477b0217897ab972e56038205501c5f5a15d96bbbacf051ec665d945fe9b38b02118f8600c90b340db529bd047931664eb6cf9bdcaca1de5bd4d332a44753469beb8cdbce84458a446c8acef5110ad064291ee48c321ad5e070161de3d4b36b9c2e7a56bef901dc30c3a52c4be1f95e8543e77dfa4c57b0da98187989edfb3161ad12f81808e0", 0x1000}}, 0x1006) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="080025bd7000ffdbdf25160000000800030066849999b4721b7e246710671b6c1b6b4e7e40ea0cf39e7a54dc3ce984fab89f501deea0ff7f0000000000008e9eb14bf991f167a6c92396c8c3a1ad228c01b464d00eef277fb73e95612cedeb0ba2666d3360d307a351a3d5113e9c9318c2d425ee1c207719414336314639", @ANYRES32=0x0, @ANYBLOB="0c000600030000000300000008000300", @ANYRES32=r6, @ANYBLOB="0c00060002000000000000000c0006000200000003000000"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x404c000) read$snapshot(r0, 0x0, 0x0) 14:20:20 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 14:20:20 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000001c0)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x8200) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000040)) socket$caif_seqpacket(0x25, 0x5, 0x5) read$snapshot(r0, 0x0, 0x0) write$snapshot(r0, &(0x7f00000000c0)="929352f4ee0e16fdfd010100005ba1764d6bf6967c720316782c1290ec0e241543b75dc0469aa7dd35cf80110217b6a6ca661047943d46838e0cc7b267ee4e7a29eb8ea42a79fc87402c106905bb8942243b2e2a14eddf647c3aac58f568f383d88429321513e5f18144d027e65246b01c5bdf4814c417cdc80e38478ac5000000000000003f0d863f71562772e34c6490cb7eac2fc414708c569ba2e4aeac047a4fad3d00780b5d34525a05abc4ee11748f7d18b4e5b700b92bb5383374be9036a8c1ab4ffd0f4c37ec5f08215abdc92681f9cdf4bb1835", 0xd8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000200)=0x7, 0x4) [ 539.913696] binder: 12560:12567 ioctl c0306201 0 returned -14 14:20:20 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="dad5c8991ea1243fa7aebe46701ed02d22b399b8aca1687206328c50f0bb67a2f98e6e85076e58716a5102310b0ccf0b03e93ab85a39300f88c6d39387a71237fb91f90f241ae84b57374e9a9f293f2b04a8c8bc7b0889f864a5d3d319b9474d6c0e2abf15df844f7cef61ff2ce77ce49a6154f7fc07fbab25404f0000000000d47a6e2613a65f450d01ca407bd33c57408c758c93377f63ea8b062f71959aaae033c64ead9c0726cc02b23338497f1dd5ae3674d7f3a592181ecbaa", @ANYRES16=r1, @ANYBLOB="00042bbd7000fcdbdf25110000000a000900ffffffffffff00000500370001000000"], 0x28}, 0x1, 0x0, 0x0, 0x20008802}, 0x10) 14:20:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000000)=[@register_looper, @enter_looper], 0x3d, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e0428951588553ce1f51d80d1ebdf35cea584a05a31da11ceb683650a55fe"}) 14:20:20 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:20 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:20 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x2, 0x0) write$UHID_INPUT(r3, 0x0, 0x0) accept4$alg(r2, 0x0, 0x0, 0x800) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000000)={0xffffffffffffff81, 0x8}) 14:20:20 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0x88, "953ce9e65450ae2f817465185e7ca110177bf05700843127fd0c7ee2f90e2ae67af934937d3f6ac37eb3dd414d856f8754d91426f704fadab74e2152b16108864c604f1e86c5ff65ab43cd3f71a94edc61f91be6094527640d333202676920f3ed328ec5403557319c0733f29b46396a84145c5d96a5f443f2bcce4c94650c4b776940990185f7fb"}, &(0x7f0000000180)=0x90) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e20, 0x7fff, @local, 0x1ff}}, 0x1, 0x4cb5}, &(0x7f0000000280)=0x90) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000002c0)={r3, 0x27, "a7b2cf545f06f1e764b587fa13b85fa40830780ca8d21779d265d465ade247aede3cfc81ccf211"}, &(0x7f0000000300)=0x2f) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000000)=""/114) 14:20:20 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:20 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:20 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:20 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r2, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x800}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x9}, 0x40081) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f00000000c0)) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x10040, 0x0) read$snapshot(r3, &(0x7f0000000040)=""/26, 0x1a) 14:20:21 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0xb0300, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x6) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000080)={0x6, [0x370, 0x200, 0x1, 0x4, 0x5, 0x3f]}, 0x10) read$snapshot(r1, 0x0, 0x0) [ 540.783891] binder: 12608:12612 ioctl c0306201 0 returned -14 14:20:21 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) 14:20:21 executing program 0: read$snapshot(0xffffffffffffffff, 0x0, 0x0) 14:20:21 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000000)=[@register_looper, @enter_looper], 0x0, 0x0, 0x0}) 14:20:21 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0xffff0001}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000000c0)={r1, 0x2}, 0x8) read$snapshot(r0, 0x0, 0x0) 14:20:21 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x9, @loopback, 0x7}}}, 0x84) 14:20:21 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x762090cd, 0x7f, 0x10001, 0x26, 0x1, 0x2, [], 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2}, 0x40) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x4840}, 0x81) read$snapshot(r0, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x1c9c0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 14:20:21 executing program 5: getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @local}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="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"/4108], &(0x7f0000000040)=0x1008) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) 14:20:21 executing program 0: read$snapshot(0xffffffffffffffff, 0x0, 0x0) 14:20:21 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:21 executing program 0: read$snapshot(0xffffffffffffffff, 0x0, 0x0) 14:20:21 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x3bd602, 0x0) read$snapshot(r0, 0x0, 0xffffffffffffff1a) [ 541.642602] binder: 12646:12652 ioctl c0306201 0 returned -14 14:20:21 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000000140)) 14:20:21 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0xf2, "8fd4ad22a4f8d4428246776cb5b32c2d88638e27303622d299f286b6eb8a010586eb21f4d671b40730f80d0171396c952c0fd88440fa7bb99744151f10b5bcbdfb77d2cdcb28f79115b32d4ef93b1af7bf74b3b3cf312aa50ccb352722751abc575f03d0887ec0ce69f572ca96b7ef9de4078bbe1820e9e57dbfd8d6d3e0afa3f9961567807f5c5c18b09fcaa6a62ced6eb25f8e5d281679c38291fe5f2bfa618537d5bab8ad28194f079f9d4a5d3725b9ad7932d18955ba8e3d85c4cde51c53cdc2a855bf841bdf732232c022fab220c2ed64e85f75506558f791609500484cc963763c7f67dd18dd9a9c18e9d03e90e4e5"}, &(0x7f0000000000)=0xfa) read$snapshot(r0, 0x0, 0x0) 14:20:21 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000000)=[@register_looper, @enter_looper], 0x0, 0x0, 0x0}) 14:20:21 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:21 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) read$snapshot(r0, 0x0, 0x0) 14:20:21 executing program 3: r0 = getuid() setreuid(0xee00, r0) read$snapshot(0xffffffffffffffff, 0x0, 0x0) 14:20:21 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) [ 541.757014] binder: 12666:12671 ioctl c0306201 0 returned -14 14:20:22 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000000)={0x3ff, 0x5}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) 14:20:22 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e1f, 0x1000, @private0, 0x1}}, 0x100, 0x7ff}, &(0x7f0000000000)=0x90) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000040)=r1, 0x4) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r1, 0xb53}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={r2, 0x2}, &(0x7f0000000240)=0x8) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) read$snapshot(r0, 0x0, 0x0) 14:20:22 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) write$snapshot(r0, &(0x7f00000000c0)="3c805bc223b56ce8e9c63961198f4f1370e4d5babc4669f03a540f18a82fdbe3562c1218cf90b8bc885852f178cc45ec7ebac8ecd01ae1646d61a44ea4a62c35581618641788a8d0fdf2a6885d87ca8ce0c2ff6ed5dfec8d0eee34395669ea14a2dec4359b85a483ccaa47f44dfa9551b99c6af4d09cdbff70852cf9bc6ef1399df1022056b513185ab0f0839992", 0x8e) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x9dee) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x8200, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000180)) 14:20:22 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x80, 0x1, 0x202, 0xfffeffff, 0x6, 0x400, 0x6, 0x0, 0x0}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x7, 0x8002, 0xc46, 0x6, 0x1, 0x4, 0x8000, r1}, &(0x7f0000000100)=0x20) 14:20:22 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000000)=[@register_looper, @enter_looper], 0x0, 0x0, 0x0}) 14:20:22 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:22 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x3, 0x4) 14:20:22 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000000)=[@register_looper, @enter_looper], 0x0, 0x0, &(0x7f00000000c0)}) 14:20:22 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(0xffffffffffffffff, 0x0, 0x0) [ 541.874297] binder: 12694:12700 ioctl c0306201 0 returned -14 14:20:22 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000)=0x400, 0x4) read$snapshot(r0, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 14:20:22 executing program 4: syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200)='NLBL_UNLBL\x00', 0xffffffffffffffff) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00', r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="020025bd7000ffdbdf25010000000500140081000000050022000100000014001f8f9e76ba62021aab00000000000000000114002000fc0200000000000000000000000000010600020092f50000"], 0x54}, 0x1, 0x0, 0x0, 0x4c880}, 0x8000) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x200) 14:20:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000680)={0x70, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x70}, 0x1, 0x0, 0x0, 0x14}, 0x4000001) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1040400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYRES64=r2, @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c00060001000000010000000c0006000300000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x8100}, 0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r9, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r10, 0x1}, 0x14}}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x6c, r10, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x620}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000818) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r11, 0x0, 0x0) 14:20:22 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x3) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='thermal_power_allocator_pid\x00', r1}, 0x10) read$snapshot(r0, 0x0, 0x0) 14:20:22 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(0xffffffffffffffff, 0x0, 0x0) 14:20:22 executing program 4: read$snapshot(0xffffffffffffffff, 0x0, 0xa) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x3e2) [ 541.992014] binder: 12711:12717 ioctl c0306201 0 returned -14 14:20:22 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 14:20:22 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000000)=[@register_looper, @enter_looper], 0x0, 0x0, &(0x7f00000000c0)}) 14:20:22 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 14:20:22 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(0xffffffffffffffff, 0x0, 0x0) 14:20:22 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e24, @local}}}, &(0x7f0000000180)=0x84) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r2, 0x0, 0x0) 14:20:22 executing program 3: read$snapshot(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x200000, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000040)={{0x1, 0x3, 0x2ff3bf2, 0x0, 0x9}, 0x0, 0x4}) write$snapshot(r1, &(0x7f0000000100)="a3d45202739a4cfef56a965475584969e9d706d81085533c01e88c2fcd30d35ad6018246a638db6b25a6db6e4e53f3de7f20573945f97d4d9ea3822703808f1eebc73a93163973b9a823380c1b96e2f9bbc118b43301dbac4c61cd097d3bedde07d1e9d1a3250d84606e8f15d91f38c8096feb9bd6b88c85ef68b8bebe5f738900"/146, 0x92) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000001c0)={{0x3, 0x2, 0x80, 0x1, 0x2}}) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f00000000c0)) 14:20:22 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) read$snapshot(r0, &(0x7f00000000c0)=""/59, 0x3b) 14:20:22 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$SNAPSHOT_FREE(r3, 0x3305) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$SNAPSHOT_FREE(r1, 0x3305) [ 542.136365] binder: 12733:12743 ioctl c0306201 0 returned -14 14:20:22 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000000)=[@register_looper, @enter_looper], 0x0, 0x0, &(0x7f00000000c0)}) 14:20:22 executing program 5: write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2d, 'pids'}, {0x2d, 'cpu'}, {0x7b, 'io'}, {0x2b, 'memory'}, {0x2b, 'io'}, {0x2d, 'memory'}]}, 0x23) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:22 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0xac}, 0x8) socket(0x10, 0x800, 0x5) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r3 = socket(0x8, 0xa, 0x80000001) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00', r1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r4, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x20}]}, 0x24}}, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x8}, 0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000140)={0x2, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=r6, 0x4) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000100)=0x3b, 0x4) 14:20:22 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "eee2e7723e2735d77056d34534d6d2ea660b2fa5293fe8a2176999ab6c6d4807"}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x1f}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) 14:20:22 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) openat$cgroup_freezer_state(r1, &(0x7f0000000040)='freezer.state\x00', 0x2, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x90100, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3305) 14:20:22 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000000)=[@register_looper, @enter_looper], 0x1f, 0x0, &(0x7f00000000c0)="d78ce1b05838a01ac4e08706c0dde02d878bdb53be7e414d8386a8e50c2f4e"}) [ 542.249668] binder: 12757:12760 ioctl c0306201 0 returned -14 14:20:22 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f00000000c0)=""/178, &(0x7f0000000000)=0xb2) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x800, 0x0) write$snapshot(r1, &(0x7f0000000180)="16f4", 0x2) read$snapshot(r0, 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x41, 0x0) read$snapshot(r2, &(0x7f0000000200)=""/172, 0xac) 14:20:22 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000000c0)={0x3, [0x7, 0x3f, 0x4801]}, 0xa) 14:20:22 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:22 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getpeername$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x20) 14:20:22 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) read$snapshot(r0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r2 = socket(0x3, 0x3, 0x9) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000100)=0xf4, 0x4) [ 542.335046] binder: 12772:12778 ioctl c0306201 0 returned -14 14:20:22 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r3, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x802, 0x0) write$UHID_INPUT(r4, 0x0, 0x0) write$UHID_INPUT2(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c0000008300cb0f3ecdbd1ccdbc56772950d5707119c172c12f238028836d14ca225c0d5685ef8ba0ae4a2b2b97308618c05f8116166eaadd76b354adedbf4bc4a40898f57c1e64b4df9d11c9e155c88e59ccf989004a100b4f41df495ec18c58d0d03415b56cfafdfdb61e872f2526751b7f81d4512735f66b6d0fde332ee7883ba6c0464a42457a"], 0x89) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000180)=@int=0x8000, 0x4) 14:20:22 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000000)={0x4007, 0x0, 0x80000000, 0x4}) r1 = socket$isdn(0x22, 0x3, 0x0) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x4) read$snapshot(r0, 0x0, 0x0) 14:20:22 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r2, &(0x7f00000000c0)={0xe, {0x0, 0x5e, 0x2, 0xf3, "748553a5abcafde8e03a79ab66e5cade88ebc15b4d32446324b7b659a3f18a3f20a2cad247eeae8b316c59cae9b4f47dec8e3491893af66aab1eb0d42f5968d3b71c3dce8b5704311cdc482f00d3fcde7456e4e6947d446602295ea3bbac2b685388e8f52cbee6c96a4b68c165e58083a696b7e1246a9016d2a50e738f490a7422590861b1464fbc0fc53cbb7afe17324811aa53a956d268d07e2bb2ed9ef5d051dc9202ebe156b7c93e04a5b39fc98ae1464d6b8f03f70fc7fc60560419084024a7b638684bdbaa2561242a71ed3f2223eeac347b4f6955547cd6523d02ff121bb0bcad097aba139e489ab20206995bff069c"}}, 0xff) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcf6c}, 0x8) read$snapshot(r1, 0x0, 0x0) 14:20:22 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x20}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x6b, "283bdb23c60662808ec8406039a9aa5ab988336dbcccb59fc6b47ce5fcd6b3690b283e0eec2bdce5dc6e76ecb8b0cabe5cd9344940e6f6c26106651d7e03df7ec5ea3b81f77bd93a09e1311f89c742cde45245814c5bc7d17e185377aa51c862178894f7f72b84cb2ca8cd"}, &(0x7f00000000c0)=0x73) read$snapshot(r0, 0x0, 0x0) 14:20:22 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0xffff8001}, &(0x7f0000000040)=0x8) read$snapshot(r0, 0x0, 0x0) 14:20:22 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) 14:20:23 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000000)=[@register_looper, @enter_looper], 0x1, 0x0, &(0x7f00000000c0)="d7"}) 14:20:23 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:23 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f00000000c0)={0xa, {0x1, 0x2, 0x6}}, 0xa) write$UHID_INPUT2(r0, &(0x7f0000000100)={0xc, {0x1a, "943d08c190d45f2a651df3a7557cb0f003e567d0a1833a22ef56"}}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) 14:20:23 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:23 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:23 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) 14:20:23 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x200200, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) 14:20:23 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x3) ioctl$SNAPSHOT_FREE(r0, 0x3305) r2 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=0xffffffffffffffff, 0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001440)={0xc0, 0x0, &(0x7f0000001300)=[@dead_binder_done, @decrefs, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000015c0)={@fda={0x66646185, 0x3, 0x0, 0x26}, @ptr={0x70742a85, 0x1, &(0x7f00000014c0)=""/226, 0xe2, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/29, 0x1d, 0x2, 0x1f}}, &(0x7f00000001c0)={0x0, 0x20, 0x48}}, 0x400}, @increfs={0x40046304, 0x1}, @decrefs={0x40046307, 0x2}, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001240)={@fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r4}, @fda={0x66646185, 0x5, 0x0, 0x10}}, &(0x7f00000012c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x71, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47168fa877b8e97432342adeb305740b9999309107354606b486434ff09289722928124efeaa17aee61fbd2acb9530303e4b35016cacb9aa3e"}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r5, 0x330f, 0xfffffffffffffc00) connect$caif(r1, &(0x7f0000000000), 0x18) 14:20:23 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x30}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x30, r8, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x8c, r2, 0x18, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x50, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1000}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r11, 0x4c80, 0x1) read$snapshot(r11, 0x0, 0x0) [ 543.218716] binder: 12827:12831 ioctl c0306201 0 returned -14 14:20:23 executing program 2: read$snapshot(0xffffffffffffffff, 0x0, 0x0) 14:20:23 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000040)={0x80000001, 0x8001}) 14:20:23 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x1) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000040)) read$snapshot(r0, 0x0, 0x0) 14:20:24 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = socket(0x6, 0x800, 0xce) ioctl$IMCLEAR_L2(r2, 0x80044946, &(0x7f00000000c0)=0x401) write$UHID_INPUT(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 14:20:24 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x4, 0x200, 0x7, 0x7, 0x0}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000000c0)={r2, 0xfff8}, 0x8) 14:20:24 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) 14:20:24 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) write$snapshot(r0, &(0x7f00000000c0)="c252b79c820204f1560a484a86114329d4dc522162e92ac4f5b747caf10b1fb1893a2eae56e73c515c793bb033cf35221b27955bd5ee42016c021317e80693f1569ab89dfcdbbdf383d57ec63f9c865d72007c5a8c38dd69e10e80d3aeb35ffc302bc3fd789026908da876870d50f772ed30fb768c73869e0a549d16d36763cea184bbce9d6d7b42d2e16174fea50d426745a0a76b93abb911035b83f8653ad76063d2dfc457c4739d244f9ca87b69a64dad6d9df61aa52541b7560a", 0xbc) 14:20:24 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000000)=[@register_looper, @enter_looper], 0x0, 0x0, &(0x7f00000000c0)}) 14:20:24 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = socket(0x22, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000001c0)={0x0, 0x81, "893f07c9423bc42aef898ac20660d1fa7942654b930d7b46f96362f01572b6360502503d0aaa461af07bef11c68e18999fa0802c73dd10c3e9faa5b31d385048e88462e3661c89a8ffb4f4fad305ed169c572a98cffe4c073aebbd57ea9d9ce24e01d5f26e1b03a99b32edee17bd96de8ab59b770ea77b734201771e0ee811c43f"}, &(0x7f0000000040)=0x89) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000280)={r2, 0x9}, 0x8) r3 = socket$isdn(0x22, 0x3, 0x23) sendto$isdn(r3, &(0x7f00000000c0)={0x9, 0xe0000000, "842d76057ddae9c907155667c797f18d7653283d7cf8f114ef41241f3078ee813a474ca0f6eb5d707d66f5f04fef181f14a0f1bf1a656e5f9aa1e6ade1fc9ffe3ad6b71a5d779ab6d07fc43a5626ad7a56272b9d0e8595767ba90d709866ffb93657524b6410daaf0462d9f0269fb1d9157448706a4f94dcb0569677f9cc8a087533b7e3b56ee03a2d18f61100247f457e4b1fc0c03601370ff75775d8c6a20acd68e826b6aed96b12671355d7577673052b47f294c30212a64b4df24adb00b36498d7215ab2efbc3ef4d48e0e50cfc8787c9b202fdd7d88754d3c9aa774d42cafd71ebfc6194b56b6e2e8ba0073068b94717c3fe1664f"}, 0xff, 0x40000001, &(0x7f0000000000)={0x22, 0x7, 0x3, 0x4, 0x1}, 0x6) read$snapshot(r0, 0x0, 0x0) 14:20:24 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:24 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="c4be00000000"], 0xfffffffffffffe30) read$snapshot(r0, 0x0, 0x0) 14:20:24 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000180)={0x7, 0x7ff, 0x8206, 0x5, 0x0, 0x400, 0xffffffea, 0x1746}, &(0x7f0000000200)=0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x80}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) read$snapshot(r0, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x802, 0x0) write$UHID_GET_REPORT_REPLY(r2, &(0x7f00000001c0)={0xa, {0xa, 0x81, 0x57}}, 0xa) 14:20:24 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000000)=[@register_looper, @enter_looper], 0x0, 0x0, &(0x7f00000000c0)}) [ 544.119249] binder: 12877:12883 ioctl c0306201 0 returned -14 14:20:24 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1002) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/42, &(0x7f00000000c0)=0x2a) read$snapshot(r0, 0x0, 0x0) 14:20:24 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x4) write$UHID_INPUT(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) read$snapshot(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="5a6a562b3028d53b5ebdb6004e553a4d8a05114c63fc3fdc36f5d2bdc9f07bb95d771fefcbb6196976be6c0430eec61790c8586cbdc41ccf02e5b3ba4e51e7628ef53624bde702c2764324d4895c028789ac000a971e5fc44857db97549d50058c63c6add2e4560ac16ec86ff41b7e1b3191b75aa71be0c4f6399e495e28342e4dec206b856d61af2be1047bdcd9295911e9eeee4a649b399278b1a776512b2fdd664b01578cc24d82c0e62737e79bfb831e", 0xb2) write$UHID_INPUT(r0, &(0x7f0000000480)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='rpc_call_rpcerror\x00', r1}, 0x10) 14:20:24 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x1, 0x3, 0xd7}}) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) read$snapshot(r0, 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000040)={0xfffffffffffff801, 0xfffffffc}) 14:20:24 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) r1 = socket(0x0, 0x3, 0x401) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000040), &(0x7f00000000c0)) read$snapshot(r0, 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000000000)) r2 = socket(0x25, 0x3, 0x200) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, 0xfffffffffffffffd, 0x0) 14:20:24 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x2) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000040)=""/36) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0xc04c0) [ 544.254449] binder: 12897:12906 ioctl c0306201 0 returned -14 14:20:24 executing program 2: read$snapshot(0xffffffffffffffff, 0x0, 0x56) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80040, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x100000001) 14:20:24 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:24 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000000)=[@register_looper, @enter_looper], 0x0, 0x0, &(0x7f00000000c0)}) 14:20:24 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = socket(0x3949c9d4d642120, 0x3, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x3800, 0x202, 0x2, 0x800000, 0x0}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000000c0)={r2, 0x28, "0eb423999a4355e54c30143fd602fc5c7f5391364b31babd5f6baa923421b73122bdcce6e50015e2"}, &(0x7f0000000100)=0x30) 14:20:24 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:24 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)=0x2, 0x4) read$snapshot(r0, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="2d637075204a08f856fcdf64fac4e3ff3d77658b547e367dbc5bbca0d3d3fd0df8e4f5732e5deb9d34756a93"], 0x5) 14:20:24 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00', r0) r3 = socket(0x1d, 0x3, 0x1) ioctl$IMCLEAR_L2(r3, 0x80044946, &(0x7f00000000c0)) r4 = socket(0x28, 0x3, 0x4100) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022bbd7000fcdbdf25010000005e84c7a301000000060003000600000008001700", @ANYRES32=r4, @ANYBLOB="08000b000100000008001900e0000001"], 0x3c}, 0x1, 0x0, 0x0, 0x240008a4}, 0x1) read$snapshot(r0, 0x0, 0x0) 14:20:24 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000)=0xfe8, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x90, "502f1b1a5eb0c4a87ff35d641055100ea6ce2b1aee07d3286d1a7199ec3136150c7a6f4d29b3709496aef0fd1d194dfbec27a2e2b0bc87c9041e5601804f74169104e0158715bc7ffd02ecf916c76acbb9df0e7ec14b44726d29b50b99be0e54023f9025c3ce33570fd787a872c34b9b0ebf375a28f3e72fe4d2ae37bb67573f669423e60d2387e86f5e4c1e0c8b36b9"}, &(0x7f0000000040)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000180)={r3, 0x1ff}, 0x8) read$snapshot(r1, 0x0, 0x0) [ 544.386084] binder: 12925:12930 ioctl c0306201 0 returned -14 14:20:24 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:24 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) read$snapshot(r0, 0x0, 0x0) socket$inet_sctp(0x2, 0x4, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) bind$bt_sco(r1, &(0x7f0000000040), 0x8) 14:20:24 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f00000000c0)=""/191, &(0x7f0000000000)=0xbf) read$snapshot(r0, 0x0, 0x0) 14:20:24 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x30, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x1e4, 0x0, 0x618, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0xec, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8f432bfb95b2462a387d0317c4179f73"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "16f7ee76b71920fd14ea02705c711bc9"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "1c36e1975344920000000000e7ffffffffffffff00"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "4f4a9a0cc8ebae5f0cf62a3c5fdbfd35"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "fd8af76aeb59b83d2e5c32a6f576856d"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "84eb87aa8b1e23c77a617280dd46236ac4db6763d3f712900e7609a4bf24ec86"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "aa80fe4e8fcf41c3e07869e1f2889ab8ac643f486026250af05371107c2421b8"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x40, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "38e1000002000000000000573b00"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "96da42272f7310a2126dde4847d55f15"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "66ad5c38edcf8873e9ffd1e1d0750589"}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x64, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "61a42ba712ae49853d1bd379db311aa3"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "693ca97aece659530c33fe1e41d6aac2"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "c52f75de5d46b0ffb2c371bcb2d00df3a5391fe7b91d56e8c1a4cb8ab807de69"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "ecfc38093a14e3a29a1f4dec61a53d8e"}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x7, 0x8000, 0x82, 0x10000}, &(0x7f00000000c0)=0x10) 14:20:24 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) write$UHID_INPUT(r2, &(0x7f0000000480)={0x8, {"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", 0x1000}}, 0x1006) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x7f}, &(0x7f0000000100)=0x8) read$snapshot(r0, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) 14:20:24 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) read$snapshot(r0, &(0x7f0000000080)=""/153, 0x99) openat$cgroup_subtree(r0, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) 14:20:24 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0xf5, "d94c7e6a8f2276c30600ccd88cb67ed8b0def84903bc70ed2f9e3ae282aa6f30057bc340a7ab392b906bc0e2f0c4dc5ec3e1ace6b3c6667ffb38d718385024a1390798e6c0bf7b4a99fa353462fe401329c1b8556bac838714980f85046ce4c2e9beddf2b38ef8e0cb10878cf923b06759f8ecf80fa2b2877622387d517fe1f5809d1bf6f9ce8005ac63f84c43c65e5cbb42a0ea7deddba187180773c5c22e4b87c46f9d838b51e6a917b4bd645663617e085824728333178964518de60c44c54a9dd439481583039c2b123746c037f6ce9d64f71ccd4f67f8125c32d0228e9635466a410a8cd4ae1132fd739b9fcda356d17a4319"}, &(0x7f0000000000)=0xfd) read$snapshot(r0, 0x0, 0x0) 14:20:24 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000000)='THAWED\x00', 0x7) r2 = socket(0x18, 0x0, 0x1) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r3, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="2b637075202d637075202b637075202d04696473202b72646d61202b696f20"], 0x1f) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) read$snapshot(r0, 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x5b, "1c55fbb20e7352a0c61ad7f71da1901925ddc8f908d49c4169e551a16e663c0f78781c3a5346c04cb5176c4f74d4eff9e492c9961a06a6339ab66922e11bf221992789a6e43a87d2e2911d26af146dd76239e85dff1ced64c63ac4"}, &(0x7f0000000140)=0x63) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000180)={r5, 0xcb, "04a083cbf92a309f49e1d5c2f7714230115c656ea6cdbdd1c66d84621af42eab55d288a91118718e9031af0b843ffa5acfdba43af9645ab917595d5883fe499968a7551e39337339b46f843a4d091f8e3553a62f1fa43874a121a13dd16f712aeb4f2640daf5fd6fa7d476580a681e201b16a5af1d6ef0f018ec76074fa91b845c778e8afac9a89c8bc156f94a67f4604b027049195f1c3ba0d8077ac5cba373c0f109c29a4873afa714edac86da99f736a705fa914c17723e842453a851213f878862598b0b3e0249128d"}, &(0x7f0000000280)=0xd3) 14:20:24 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = socket(0x5, 0xa, 0x401) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000040)=""/205, &(0x7f0000000140)=0xcd) read$snapshot(r0, 0x0, 0x0) 14:20:24 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0x32, "f2cce56814a4710440bb707bf3b538a4db78835d7b361ec1e75f7bdfad66c5b54385f16d7bc9dbe3df5079ce1dafd60a8eeb"}, &(0x7f0000000180)=0x3a) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}}}, 0x84) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r3, 0x1f, 0x9}, &(0x7f0000000040)=0xc) read$snapshot(r0, 0x0, 0x0) 14:20:24 executing program 2: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0xd1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) 14:20:24 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) read$snapshot(r0, 0x0, 0x0) 14:20:24 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = socket(0x19, 0x800, 0x1) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000100)=0x1) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000040)=0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00'}) 14:20:24 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:24 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) write$UHID_INPUT(r1, &(0x7f00000000c0)={0x8, {"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", 0x1000}}, 0x1006) 14:20:25 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x54, 0x0, &(0x7f0000000240)=[@request_death, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/175, 0xaf, 0x0, 0x18}, @flat=@weak_handle={0x77682a85, 0xa}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}}], 0xa0, 0x0, &(0x7f00000002c0)="4e6d9e36c8075a46d343149b19250d323ebda692dfbdab05f3711352aa08abcca96dc2fb0ef98a228da6db1af4000b5de6fd98a87f1daa502502812c0c3bb76c044ad56444bb96723b60460b062965b5cbd5eab232d3f1bdcee7635a6a2b4a9389c76bc9312223a5a0ee9c8d3833b19fd1739fca2c60dc4a427b7ad7997ceafc472bbcf9faf7ea25c62589ef93ef52bbb3bc04cf495d52f1a12a1587f3001ad5"}) read$snapshot(r0, 0x0, 0x0) 14:20:25 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:25 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x42200, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:25 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000000)={0xc, {0x48, "117d06db6a09729a686e69a008865d7889e0e09ac5643ed0a935479737e4b5a5c6ca2903a5679e6e95eba943261b283bdc7eacdda2769266d4a95619b985e858f3d24e393dc1fadc"}}, 0x4e) read$snapshot(r0, 0x0, 0x0) 14:20:25 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = socket(0x1e, 0x6, 0x6) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000000)=""/8, &(0x7f0000000040)=0x8) read$snapshot(r0, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0x1, @private1}}}, 0x84) 14:20:25 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) 14:20:25 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x8}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e32, @remote}}, [0x60e, 0xfffffffffffffffe, 0x7f, 0x9, 0x0, 0x800000000009, 0x4a0, 0x1, 0x55b6ce9e, 0x0, 0xfffffffffffffffa, 0x80000ffffffff, 0xfffffffffffff001, 0x0, 0x7f]}, &(0x7f0000000000)=0x100) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f00000001c0)) read$snapshot(r0, 0x0, 0x0) 14:20:25 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:25 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000000c0)=""/137, &(0x7f0000000180)=0x89) read$snapshot(r0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x240040) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/timer\x00', 0x400000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x19, 0x8000, 0x0, 0x5, 0x534, r2, 0x3, [], 0x0, r1, 0x0, 0x2, 0x1}, 0x40) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000200)={{0xffffffffffffffff, 0x3, 0xe2eb, 0x0, 0x81}}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r3, 0x0, 0x0) ioctl$IMCLEAR_L2(r3, 0x80044946, &(0x7f0000000280)=0x2d5c) 14:20:25 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x5}, 0x8) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x1e800, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3305) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYBLOB="34000000ed06b9eeb8298dec60b367f7d9ebfbe2bf76da331c7b41beba989c683ad65510e20e68a87190adbca83e7533488664978e9718862dffe8eb7e359c512809ede5bfa49940cd0000000000000000"], &(0x7f0000000100)=0x3c) 14:20:25 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:25 executing program 2: read$snapshot(0xffffffffffffffff, 0x0, 0x0) 14:20:25 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) read$snapshot(r0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)) 14:20:25 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x9}) ioctl$SNAPSHOT_FREE(r0, 0x3305) 14:20:25 executing program 5: setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000000)={0x0, 0xff5}, 0x8) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:25 executing program 2: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x13) 14:20:25 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x44, @loopback, 0x5}}}, &(0x7f0000000000)=0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000001c0)={r1, 0xda, "20a551573bf566412450dfd3d103a01b2949a25570a4178c7739ad09b361e5dc1d4c8c0c17ad7f24e9a013fcf2f56b3057495c27c610713520b41703870352c65fc624adc01114a8bf5161b763fde08734699661653e5854be0b56cbeb5e60720d7ae1576fa3222a668c22abd71075ebcf8cd2e61577eb65241b277c5e3126f129e2e43b67639332febb601f4f5aceb272c8f87a28a993a4c086643d8ef5d3d725646b47c0dd233ba3ea0a3e8aaf0a53e40768aec481c22c7539edcca49260c21ed4e01c893f699497e1cf26690fbe47eb15fdfdc54bccb32be3"}, &(0x7f00000002c0)=0xe2) read$snapshot(r0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xa4f6ee94ed016ba, 0x1, 0x3ff, 0x3, 0x800}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x0, 0x0, 0x200, 0x1, 0x39}}) 14:20:25 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) write$UHID_INPUT2(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c00000031001d0cafbd0180000000000000c040824eb84e056504ef0a90576cfdeba305b24e3d81fc966b6e52f9b9fcfa856bc2f73daf877aee94df23b3a17eb59640dff5f9ef5b8fba92d0876c0473244e040b61a85a4f737ed608db9ccd09c09b377a027f125fd13174d20482d25c992a38ba612e18f08033355d2681bf85ec1c137675bc7cac8c6eb43f61cfee05d7adb991fe1c6c3557c2d765ce06aa82c6d2671e71d6d9a286935668b4872a387dd5c12131"], 0x37) ioctl$SNAPSHOT_FREE(r1, 0x3305) 14:20:25 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x28090}, 0x240000c0) 14:20:25 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000000)) 14:20:25 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:25 executing program 4: getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x1, 0x4f, @ipv4={[], [], @multicast2}, 0x1}}, 0x3dd, 0x8}, &(0x7f0000000100)=0x90) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0xa6) read$snapshot(r0, 0x0, 0x0) 14:20:25 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000000)=0xc703) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x200, 0x0) read$snapshot(r2, &(0x7f00000000c0), 0x0) 14:20:25 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) 14:20:25 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x5) write$UHID_INPUT2(r0, &(0x7f0000000100)={0xc, {0x25, "98ca19cff1783646f4839bab32aa4754b733ccb6d5db5b6b90c6c3bb9041ddae0780be9e37"}}, 0x2b) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000140)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) write$UHID_INPUT(r1, 0x0, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3305) 14:20:25 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r6, 0x0, 0x0) 14:20:25 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', r0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) connect$bt_sco(r2, &(0x7f00000000c0)={0x1f, @fixed={[], 0x10}}, 0xfffffffffffffe60) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r3, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x40, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 14:20:25 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x40, @local, 0x7}}}, &(0x7f0000000000)=0x84) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) 14:20:25 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/158, 0x9e, 0x1, 0x1}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x10a, 0x2}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0xe7, 0x0, &(0x7f0000000240)="fbc0f28507f6448c719886ca98ecb4407d37ca36f55a82e839ee4a76fea97c2279632ba39ecafc0fa0109f2ae80de49c8e93421c70585e9d561f6279afa4da81aaef46075fbf9cecc6d762580ef07cb5f6bf102eba2cbcb5b65324aa30f88eef1ce04e4e36433e358f2bbc7e24f242b6bda9e6bd13f07a82f4c8fae7ef6916634870546268b06e74dd01387aa07477a0f068f2a67cd594fb9ef12f74df86594f433567c154cf11b5624c0c657189df364c870700e738998abf03cb0bce66ec912724b1a9a08209ad23f54c9231cb8e8e95853049a055c5c09f453fb96b6f626c8d30e5c8afeb27"}) 14:20:25 executing program 4: write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) write$snapshot(0xffffffffffffffff, &(0x7f0000000000)="8b9f7424f8279481d72fc343a3e54d904c31bf4e4c", 0x15) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:25 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x80002) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1, 0x3, 0x6, 0x1, 0x9}}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000080)={{0x3, 0x3, 0x4, 0x3, 0x8}, 0xfffffffb, 0x0, 'id0\x00', 'timer0\x00', 0x0, 0x4, 0x837, 0x7, 0xfffffffe}) 14:20:25 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x5}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000000c0)={r2, 0x92, "11b154279318cc225084490a6080b37fce2ba1bdac14bec65edeb221be623e5751deab000aab9965d536d9e3822438134f88c0b270b9da56fb3852b5c29c861ae5b53b351d79d778b8be20fbda0a9bab59982eba4aa2e4633f80be6621e62b487595a3fff2501565f5c676581a1dfb6c566822194216bc247d0b729a9cd3998f643d0f3b8106b3d016807f489de7a4ff12c4"}, &(0x7f0000000180)=0x9a) write$UHID_SET_REPORT_REPLY(r1, &(0x7f00000001c0)={0xe, {0x6, 0x9, 0x3f}}, 0xc) 14:20:25 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x4000040) read$snapshot(r0, 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000000180)) 14:20:25 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x84c00, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) 14:20:25 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x4280) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) 14:20:25 executing program 5: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000128bd7000fddbdf250300000005000100010000001400030000000000000000000000ffff7f0000011400030000000000000000000000000000000000140006007663616e30000000000000000000000008000500ac1414bb140006006d6163736563300000000000000000002600070073797374656d5f753a6f626a6563745f723a7070705f6465766963655f743a7330000000"], 0x9c}, 0x1, 0x0, 0x0, 0x40004}, 0x4080) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x8001, 0xbc}, &(0x7f0000000600)=0x90) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000002c0)={r1, 0x8}, &(0x7f0000000300)=0x8) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f00000005c0)={0x9, 0x8}) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000480)={r1, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x2, 0x0}}}}, 0x84) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000540)={0x2, 0x0, 0x3, 0x6fe, r1}, &(0x7f0000000580)=0x10) write$UHID_INPUT(r2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x6}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x800) 14:20:25 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000000)={0x1}) 14:20:25 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040), &(0x7f00000000c0)=0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0xafda, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5}, @in6={0xa, 0x4e22, 0x40, @empty, 0xf3c9}], 0x38) 14:20:25 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00', r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fffffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4) 14:20:25 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) r2 = mmap$binder(&(0x7f0000ff3000/0xa000)=nil, 0xa000, 0x1, 0x11, r0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x60, 0x0, &(0x7f0000000180)=[@exit_looper, @dead_binder_done, @increfs={0x40046304, 0x2}, @acquire={0x40046305, 0x3}, @increfs_done={0x40106308, 0x3}, @exit_looper, @release={0x40046306, 0x1}, @clear_death={0x400c630f, 0x3}, @exit_looper, @free_buffer={0x40086303, r2}], 0x98, 0x0, &(0x7f0000000200)="33102a3c793ab24543ef85455527a629733f5e3e580912253f0fd401b367987b7d454791d50fc7986fc83b3a375c9c032222262ff7bf7a920ca4ef10c04af377fd618e903fa37269ad61e04db2f67c66b8fc62c780449f0d0864147b35ab32033017f616306470f016427d1f9bb0b8ea4b0ccb65b9a171f5158189c918877c7703a9e6425369c53804e13a4c70a865b70702cca4fd8cf282"}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @remote}}, 0x1000, 0x8}, 0x90) 14:20:25 executing program 3: setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000)=0x3, 0x4) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:25 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0xfffeffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20004804) read$snapshot(r0, 0x0, 0x0) 14:20:25 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40202, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000f0000000c000600000000000000000005000f000000000008000300", @ANYRES32=r3, @ANYBLOB="bd28798772838206f1603f58055634b542a1857713ec505c0b50a7a9c7c9d2dd9fa06df86678fa61ad2c54b2e4b3377d3f60b1cc7307a9bf3b488f3ace8d8498b731b49a3537191fb7cb02463a2ec4430654b074fd2c67c69b67395a89758add2c98becef639e53b985fd9b9e416129efa97ab805d2bb4c4d18cb181deefb5a09a5318a0b133ca45ccbfc10dca9de1bd22136a5a8491886e319c9eaf4977efed498d9b397144635abd15d466462ee41907"], 0x30}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0cacea634e637c23b0fa44a1d6e9876e"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x2404c891) 14:20:25 executing program 4: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000040)=0x8) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:25 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000)=0x8, 0x4) r1 = socket(0x29, 0xa, 0xbd) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e22, 0x7fffffff, @mcast1, 0x34b3}, @in6={0xa, 0x4e21, 0x954, @private2}, @in6={0xa, 0x4e23, 0x101, @private1={0xfc, 0x1, [], 0x1}, 0x359b}, @in={0x2, 0x4e21, @multicast1}], 0xa4) read$snapshot(r0, 0x0, 0x0) 14:20:25 executing program 3: r0 = socket(0x25, 0x0, 0xe5) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x1e}, 0x5}}, 0xf5, 0x3da}, &(0x7f0000000040)=0x90) write$khugepaged_scan(0xffffffffffffffff, &(0x7f0000000200)='1000000\x00', 0x8) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000180)=0x80000000, 0x4) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000001c0)=0x4, 0x4) read$snapshot(r1, 0x0, 0x0) 14:20:26 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040)='freezer.state\x00', 0x2, 0x0) read$snapshot(r1, 0x0, 0x22) 14:20:26 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000001300)={0x44, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfe}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) read$snapshot(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000200)={0x0, 0x1000, "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"}, &(0x7f0000001240)=0x1008) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000001280)={r2, 0x80000000}, &(0x7f00000012c0)=0x8) 14:20:26 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x101000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r3, 0x0, 0x0) read$snapshot(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0xffffffffffffffff, 0x1, 0x445, 0x2, 0x8}}) 14:20:26 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8081}, 0x4000000) read$snapshot(r1, 0x0, 0x0) 14:20:26 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x1, 0x8000, 0x2, 0x85}}) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000040)={0x1, 0x80000000}) 14:20:26 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x2d, 'cpu'}, {0x2d, 'rdma'}, {0x2b, 'pids'}, {0x2d, 'memory'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}, {0x2d, 'memory'}, {0x2d, 'cpu'}, {0x2d, 'pids'}]}, 0x36) read$snapshot(r0, 0x0, 0x0) 14:20:26 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) read$snapshot(r0, &(0x7f0000000000)=""/115, 0x73) 14:20:26 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:26 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = socket(0xb, 0x5, 0x8) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4014040) 14:20:26 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r3, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000005c0)={0x0, 0xf3, "5396f0320bda86da208c82070799d88519b012a5cf7ef8c7adc0bd039f619bad21a867da6a7be5729e8ee616adb41ceb9efa17eb4c2379a5976b918044b220a0d2fe0ce00d873dd39f0a94077eeb37059fe08f3540607e1bc1ffeed2aad15f076f764200a6579cec5ea1b19a7cb23b625d040ef188e84a2cacfe1852bf413492089e0be4a95852c3381e83eff09c52b654ee7c4f89dece047a44d708e09b36ad33fed47f5e107a7e277677836733b74fa5f6205deaf12e5fd3627ef24c282eddba8974cc865d00982ac49133563318ba27419c2f5ecd6dbc41c4bf1c15bee4fb1cac061da9606ad2ead5f01c6d9e42d9e543a1"}, &(0x7f00000006c0)=0xfb) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='kvm_msi_set_irq\x00', r3}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0xfc, 0x0, &(0x7f0000000300)=[@decrefs={0x40046307, 0x3}, @enter_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@ptr={0x70742a85, 0x1, &(0x7f0000000080)=""/120, 0x78, 0x1, 0x3b}, @fd={0x66642a85, 0x0, r2}, @flat=@handle={0x73682a85, 0x1101, 0x1}}, &(0x7f0000000000)={0x0, 0x28, 0x40}}, 0x40}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="000000000000000000000000852a646600000000", @ANYRESDEC=r4, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000000e00000000000000"], &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @increfs_done, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)={0x0, 0x18, 0x38}}}], 0xaa, 0x0, &(0x7f0000000440)="a24ea71edff5df4aa15e933ce8cc7e39b35b1d61856162cccb8a758e7c0c217fa06a238edf96c58fc1d6de04636a23a93e6d7c54bbe71bbabf95e949b7a93aa2def71d1d6051351e0211de37cefbe2e297313fd4d1487d88a24820201948d59969ea1c84b3e22639e466e0c2682193781f0c881bbd43f360b96b24d44d5747769be97f8a39b8261f7d241eaa6b014a350877bddcb2fd23001a025d6a53647db34d98fe8c077c28f1952d"}) 14:20:26 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x7) ioctl$SNAPSHOT_FREE(r0, 0x3305) read$snapshot(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000100)={r1, @in={{0x2, 0x4e22, @multicast2}}, [0x20, 0xfffffffffffffffd, 0x8, 0x0, 0x400, 0x100000000, 0x8, 0x200, 0x0, 0x8, 0xab, 0x5, 0x100000001, 0x7, 0x4]}, &(0x7f0000000200)=0x100) socket$caif_seqpacket(0x25, 0x5, 0x5) 14:20:26 executing program 4: read$snapshot(0xffffffffffffffff, 0x0, 0x0) 14:20:26 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x7) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 14:20:26 executing program 2: ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:26 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x2100) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x4, 0xff, 0x5, 0x0, 0xd}) 14:20:26 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:26 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x78, 0x0, &(0x7f0000000300)=[@request_death={0x400c630e, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x64362b4e2fc1b573, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/203, 0xcb, 0x1, 0x3a}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/194, 0xc2, 0x2, 0x2}, @flat=@binder={0x73622a85, 0x100}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @acquire_done, @clear_death={0x400c630f, 0x3}], 0xac, 0x0, &(0x7f0000000380)="b0c10a463b6d773bfeb175ec8a7b996ae1c2c9ddbacb62892febef937fe921b2bf4e0d2be2a956bbfa5f1cd12d2be97f241388cb03d63cbe91e9e32b1a880eec1194c332900643aca33cc8a55ebcbcbc89257f7e008497ddd3ff8b4e28541168e1fb7f60507c76f23870d7719ccad6d175574c7041b1d5158e9c1c807be2580bc8436b4d833025d1d93edaff267aa7059e8ebe4a96e5c4d61427e26ed1496f0a4e68eb0305349836ca7a6b27"}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0)='batadv\x00', r0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x828000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r1, 0xa20, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000000) read$snapshot(r0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0)='l2tp\x00', r2) 14:20:26 executing program 4: ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000040)=0x5, 0x4) write$snapshot(r1, &(0x7f0000000040), 0x0) 14:20:26 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = socket(0xb, 0x5, 0x8) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4014040) 14:20:26 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x7) ioctl$SNAPSHOT_FREE(r0, 0x3305) read$snapshot(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000100)={r1, @in={{0x2, 0x4e22, @multicast2}}, [0x20, 0xfffffffffffffffd, 0x8, 0x0, 0x400, 0x100000000, 0x8, 0x200, 0x0, 0x8, 0xab, 0x5, 0x100000001, 0x7, 0x4]}, &(0x7f0000000200)=0x100) socket$caif_seqpacket(0x25, 0x5, 0x5) 14:20:26 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x3}, 0x8) read$snapshot(r0, 0x0, 0x0) 14:20:26 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r1, &(0x7f0000000040)='freezer.state\x00', 0x2, 0x0) 14:20:26 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="58010000", @ANYRES16=r0, @ANYBLOB="01002bbd7000fddbdf251800000008000300", @ANYRES32=r1, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x8001}, 0x890) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r2, 0x0, 0x0) 14:20:26 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x78, 0x0, &(0x7f0000000300)=[@request_death={0x400c630e, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x64362b4e2fc1b573, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/203, 0xcb, 0x1, 0x3a}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/194, 0xc2, 0x2, 0x2}, @flat=@binder={0x73622a85, 0x100}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @acquire_done, @clear_death={0x400c630f, 0x3}], 0xac, 0x0, &(0x7f0000000380)="b0c10a463b6d773bfeb175ec8a7b996ae1c2c9ddbacb62892febef937fe921b2bf4e0d2be2a956bbfa5f1cd12d2be97f241388cb03d63cbe91e9e32b1a880eec1194c332900643aca33cc8a55ebcbcbc89257f7e008497ddd3ff8b4e28541168e1fb7f60507c76f23870d7719ccad6d175574c7041b1d5158e9c1c807be2580bc8436b4d833025d1d93edaff267aa7059e8ebe4a96e5c4d61427e26ed1496f0a4e68eb0305349836ca7a6b27"}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0)='batadv\x00', r0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x828000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r1, 0xa20, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000000) read$snapshot(r0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0)='l2tp\x00', r2) 14:20:26 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) read$snapshot(r0, &(0x7f0000000000)=""/115, 0x73) 14:20:26 executing program 4: read$snapshot(0xffffffffffffffff, 0x0, 0x0) 14:20:26 executing program 5: getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f00000000c0)=""/95, &(0x7f0000000000)=0x5f) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0x6, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x22001, 0x0) 14:20:26 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) 14:20:26 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) read$snapshot(r0, 0x0, 0x0) 14:20:26 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000000)) 14:20:26 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r1, &(0x7f0000000040)='freezer.state\x00', 0x2, 0x0) 14:20:26 executing program 0: r0 = socket(0x25, 0x0, 0xe5) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x1e}, 0x5}}, 0xf5, 0x3da}, &(0x7f0000000040)=0x90) write$khugepaged_scan(0xffffffffffffffff, &(0x7f0000000200)='1000000\x00', 0x8) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000180)=0x80000000, 0x4) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000001c0)=0x4, 0x4) read$snapshot(r1, 0x0, 0x0) 14:20:26 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:26 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) 14:20:26 executing program 1: r0 = socket(0x25, 0x0, 0xe5) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x1e}, 0x5}}, 0xf5, 0x3da}, &(0x7f0000000040)=0x90) write$khugepaged_scan(0xffffffffffffffff, &(0x7f0000000200)='1000000\x00', 0x8) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000180)=0x80000000, 0x4) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000001c0)=0x4, 0x4) read$snapshot(r1, 0x0, 0x0) 14:20:26 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x8, 0x4) read$snapshot(r0, 0x0, 0x0) 14:20:26 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="4f49f1682037fece342b588036e158987faa89e6102598b6143c799aa5dede71d0d0b81f38b8f4237f813b070e5e8aad53f0ef9e645d1696ef2fcffe7cb5b23bb84c76b25133db196d8c8f2fdc55c0add7677742844808b71587da388d944f30cb20235c9c89a82c09fccef86b7191355be22cb1cdf4202b8a873f767a21eb500a170221f2d1f80ca5726663b5b5a75722bf6d7d8da6c25b55c576feb6b08db73717fc9a5ee19ba6682bbf7d5fefa764181c9f", 0xb3) read$snapshot(r0, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x9) 14:20:26 executing program 0: r0 = socket(0x25, 0x0, 0xe5) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x1e}, 0x5}}, 0xf5, 0x3da}, &(0x7f0000000040)=0x90) write$khugepaged_scan(0xffffffffffffffff, &(0x7f0000000200)='1000000\x00', 0x8) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000180)=0x80000000, 0x4) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000001c0)=0x4, 0x4) read$snapshot(r1, 0x0, 0x0) 14:20:26 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0xe00, @mcast1, 0x3}}, 0x7, 0xfffc}, 0x90) 14:20:26 executing program 1: r0 = socket(0x25, 0x0, 0xe5) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x1e}, 0x5}}, 0xf5, 0x3da}, &(0x7f0000000040)=0x90) write$khugepaged_scan(0xffffffffffffffff, &(0x7f0000000200)='1000000\x00', 0x8) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000180)=0x80000000, 0x4) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000001c0)=0x4, 0x4) read$snapshot(r1, 0x0, 0x0) 14:20:26 executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_process_wait\x00'}, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x40000, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x1, 0x0) read$snapshot(r3, 0x0, 0xfffffffffffffd35) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000280)={0x0, 0x8}, &(0x7f00000002c0)=0x8) 14:20:26 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f00000000c0)={{0xffffffffffffffff, 0x1, 0x7, 0x3, 0x10000}, 0xfffffffffffffffb, 0x8ac}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000000)=""/23, &(0x7f0000000140)=0x17) 14:20:26 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40202, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000f0000000c000600000000000000000005000f000000000008000300", @ANYRES32=r3, @ANYBLOB="bd28798772838206f1603f58055634b542a1857713ec505c0b50a7a9c7c9d2dd9fa06df86678fa61ad2c54b2e4b3377d3f60b1cc7307a9bf3b488f3ace8d8498b731b49a3537191fb7cb02463a2ec4430654b074fd2c67c69b67395a89758add2c98becef639e53b985fd9b9e416129efa97ab805d2bb4c4d18cb181deefb5a09a5318a0b133ca45ccbfc10dca9de1bd22136a5a8491886e319c9eaf4977efed498d9b397144635abd15d466462ee41907"], 0x30}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0cacea634e637c23b0fa44a1d6e9876e"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x2404c891) 14:20:26 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x84c00, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) 14:20:26 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) 14:20:26 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', r0) read$snapshot(r0, 0x0, 0x0) 14:20:26 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x48, 0x0, &(0x7f0000000380)=[@register_looper, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@flat=@handle={0x73682a85, 0x114, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/109, 0x6d, 0x2, 0x33}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/242, 0xf2, 0x1, 0x18}}, &(0x7f0000000340)={0x0, 0x18, 0x40}}}], 0x5a, 0x0, &(0x7f0000000400)="2b6788f3554595ac597bc6fc29cafc0ec63340cc5a42660bdac1c738a3f2c7c929aa911cd16266305fdaad91581608b2ae3828ca29799582f81f6b580f0b5a147b061e0cfbc4ed5c842564a3e66f73425e07094bd26e6e48d403"}) r0 = getuid() r1 = getuid() getresuid(&(0x7f0000000040)=0x0, &(0x7f00000000c0), &(0x7f0000000100)) setreuid(r0, r1) r3 = getuid() setreuid(r2, r3) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x63f}, 0x8) read$snapshot(r4, 0x0, 0x0) 14:20:26 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = getpgrp(0xffffffffffffffff) rt_tgsigqueueinfo(r2, 0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x28, 0x3ff, 0x80000000}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0)='nl802154\x00', 0xffffffffffffffff) read$snapshot(r0, 0x0, 0x0) 14:20:26 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x84c00, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) 14:20:26 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x84c00, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) 14:20:26 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:26 executing program 3: setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000000)={0x8, 0x5b, 0x6, 0x5}, 0x8) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fedbdf25040000001400060067726530000000000000000000000000260ca9d898ba7adcfc9c94f1f6222add12fca38414af13a08c69d33c6ee0f3a3acd10ca6dab020dff9e1e630ff49b529e45bdf528efb010000807aaa68d6a464d79b8c17799616fd5f81bb14864b9ad6b1cc270a8c85"], 0x28}, 0x1, 0x0, 0x0, 0x40002}, 0x4000080) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x203012}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x880) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r2, 0x0, 0x0) 14:20:26 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) 14:20:26 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', r0) read$snapshot(r0, 0x0, 0x0) 14:20:26 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00', r0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x40}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x40802) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r1, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x378a}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8880}, 0x81) 14:20:27 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}}, [0x4, 0x4, 0x1ff, 0x10001, 0x7, 0xfffffffffffffffd, 0x101, 0x80000000, 0x3f, 0x5, 0x9, 0x6, 0x81, 0x2, 0x4]}, &(0x7f0000000140)=0x100) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r0, 0x3}, &(0x7f00000001c0)=0x8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000200)={0xc, {0xf0, "100c4d26fa5fecc04a60bc8d322550c81bd2739a2006fa0848575930e735cc050da19585ccdbffc6ed4b06cc86f3b2bc635b4c68b6b29d7ea331fe11c6dd7c7a94f97805fb4022ea44c545766f15c63d4753b4af253c368d9301737488bff2c4e6f124038cab707025d05daf5a8c1f16cf21699eef9aada2f71a6275082d48fa48aa69a4382915ea25c879e6b0e4b6f2e015ca765ac310cc7cef6f00d684d4676a686d2e89ca1ff64227390a04b42a2258c169af658200dd287d55416b6e531707c4f96814f7911d0a9b16eb0c07783a855c85a2ab2a0fd72835cce928dbf836b430a266a15c2bcc3209aed7e4f96524"}}, 0xf6) 14:20:27 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = getpgrp(0xffffffffffffffff) rt_tgsigqueueinfo(r2, 0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x28, 0x3ff, 0x80000000}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0)='nl802154\x00', 0xffffffffffffffff) read$snapshot(r0, 0x0, 0x0) 14:20:27 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x5}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000000c0)={r2, 0x92, "11b154279318cc225084490a6080b37fce2ba1bdac14bec65edeb221be623e5751deab000aab9965d536d9e3822438134f88c0b270b9da56fb3852b5c29c861ae5b53b351d79d778b8be20fbda0a9bab59982eba4aa2e4633f80be6621e62b487595a3fff2501565f5c676581a1dfb6c566822194216bc247d0b729a9cd3998f643d0f3b8106b3d016807f489de7a4ff12c4"}, &(0x7f0000000180)=0x9a) write$UHID_SET_REPORT_REPLY(r1, &(0x7f00000001c0)={0xe, {0x6, 0x9, 0x3f}}, 0xc) 14:20:27 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'pids'}]}, 0x6) read$snapshot(r0, 0x0, 0x0) 14:20:27 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$snapshot(r2, 0x0, 0x32) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x84) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r3, 0x0, 0x0) ioctl$SNAPSHOT_UNFREEZE(r3, 0x3302) 14:20:27 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00', r0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x40}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x40802) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r1, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x378a}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8880}, 0x81) 14:20:27 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', r0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) connect$bt_sco(r2, &(0x7f00000000c0)={0x1f, @fixed={[], 0x10}}, 0xfffffffffffffe60) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r3, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x40, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 14:20:27 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) read$snapshot(r0, 0x0, 0x0) 14:20:27 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:27 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = socket(0x18, 0x0, 0x1) connect$bt_sco(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x7ff, 0x4) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x121000, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f00000000c0)=""/133, 0x85) 14:20:27 executing program 4: ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000480)={{0xffffffffffffffff, 0x1, 0x1, 0x0, 0xc}, 0xa03c}) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000180)) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/timer\x00', 0x60a80) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000400)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/timer\x00', 0x1a1402) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r4, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000140)=""/8) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f00000000c0)={{0x0, 0x0, 0xb, 0x1, 0x7}, 0x901, 0x6db9}) write$khugepaged_scan(r1, &(0x7f0000000340)='1000000\x00', 0x8) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) read$snapshot(r0, 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r6, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r6, 0x40485404, &(0x7f0000000000)={{0x1, 0x2, 0x7ff, 0x2, 0x7d72c9e1}, 0xffffffff, 0xdde}) 14:20:27 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', r0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) connect$bt_sco(r2, &(0x7f00000000c0)={0x1f, @fixed={[], 0x10}}, 0xfffffffffffffe60) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r3, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x40, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 14:20:27 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', r0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) connect$bt_sco(r2, &(0x7f00000000c0)={0x1f, @fixed={[], 0x10}}, 0xfffffffffffffe60) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r3, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x40, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 14:20:27 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x2c00, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) 14:20:27 executing program 4: read$snapshot(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="01000600", @ANYRES32=0x0], &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000400)={r0, @in6={{0xa, 0x4e23, 0x6, @private1, 0x81}}, 0x2bf, 0x810}, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000004c0)=@assoc_value, &(0x7f0000000500)=0x8) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f00000003c0)) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x6c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/94, 0x5e, 0x0, 0x1d}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000100)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x2}, @decrefs={0x40046307, 0x3}, @increfs={0x40046304, 0x1}], 0x70, 0x0, &(0x7f00000001c0)="82e0a75ed3b97b0ac81fc5fc222c9b01ef1fee485c95115396205128db3cc3636a51e3da91d30d99800d49474888ac84a078baa33b934f44a7a578a9d75eddfa803cf5738ccc5a08880e31c5131682e9b12a8d4fa47460b0d4c4130038a7d71cbfb7a981e6b3671bf0f145657cdecf39"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r4, 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r5, 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r5, 0x400c330d, &(0x7f0000000340)={0x6, 0x5}) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000300)={r0}, 0x8) 14:20:27 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000000)={0x4, 0x200, 0x2, 0x0, 0x3}) read$snapshot(r0, 0x0, 0x0) 14:20:27 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) 14:20:27 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x100, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x101, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0xfffffffffffffffa) r3 = socket$isdn(0x22, 0x3, 0x21) ioctl$IMCTRLREQ(r3, 0x80044945, &(0x7f0000000080)={0x8, 0xf17, 0x166, 0x68e}) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 14:20:27 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', r0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) connect$bt_sco(r2, &(0x7f00000000c0)={0x1f, @fixed={[], 0x10}}, 0xfffffffffffffe60) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r3, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x40, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 14:20:27 executing program 5: sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="090225bd7000ffdbdf250300000008002b0004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x40811) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000280)={{0x0, 0x0, 0x2, 0x2, 0xbb5}, 0x3, 0x7, 'id0\x00', 'timer1\x00', 0x0, 0xfffffffffffffffd, 0x9, 0x5b6, 0xfff}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00', r0) read$snapshot(r0, 0x0, 0x0) 14:20:27 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) read$snapshot(r0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)) 14:20:27 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) connect$bt_sco(r1, &(0x7f0000000000), 0x8) 14:20:27 executing program 4: shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000240)=""/65) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000200)=0x200) read$snapshot(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, [@alu={0x4, 0x0, 0xc, 0x7, 0xa, 0x20, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4e52}, @ldst={0x0, 0x0, 0x3, 0x3, 0x0, 0xfffffffffffffffe, 0x4}, @exit, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @generic={0x0, 0x1, 0x1, 0x8, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @call={0x85, 0x0, 0x0, 0x63}]}, &(0x7f00000000c0)='GPL\x00', 0xffffff81, 0x0, 0x0, 0x41100, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x0, 0x2, 0x1}, 0x10}, 0x78) 14:20:27 executing program 1: read$snapshot(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="01000600", @ANYRES32=0x0], &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000400)={r0, @in6={{0xa, 0x4e23, 0x6, @private1, 0x81}}, 0x2bf, 0x810}, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000004c0)=@assoc_value, &(0x7f0000000500)=0x8) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f00000003c0)) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x6c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/94, 0x5e, 0x0, 0x1d}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000100)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x2}, @decrefs={0x40046307, 0x3}, @increfs={0x40046304, 0x1}], 0x70, 0x0, &(0x7f00000001c0)="82e0a75ed3b97b0ac81fc5fc222c9b01ef1fee485c95115396205128db3cc3636a51e3da91d30d99800d49474888ac84a078baa33b934f44a7a578a9d75eddfa803cf5738ccc5a08880e31c5131682e9b12a8d4fa47460b0d4c4130038a7d71cbfb7a981e6b3671bf0f145657cdecf39"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r4, 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r5, 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r5, 0x400c330d, &(0x7f0000000340)={0x6, 0x5}) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000300)={r0}, 0x8) 14:20:27 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000000)={0x5, 0x4baa1f99, 0x0, 0x0, 0x5}) read$snapshot(r0, 0x0, 0x0) 14:20:27 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) personality(0xc) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) read$snapshot(r0, 0x0, 0x0) 14:20:27 executing program 0: read$snapshot(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="01000600", @ANYRES32=0x0], &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000400)={r0, @in6={{0xa, 0x4e23, 0x6, @private1, 0x81}}, 0x2bf, 0x810}, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000004c0)=@assoc_value, &(0x7f0000000500)=0x8) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f00000003c0)) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x6c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/94, 0x5e, 0x0, 0x1d}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000100)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x2}, @decrefs={0x40046307, 0x3}, @increfs={0x40046304, 0x1}], 0x70, 0x0, &(0x7f00000001c0)="82e0a75ed3b97b0ac81fc5fc222c9b01ef1fee485c95115396205128db3cc3636a51e3da91d30d99800d49474888ac84a078baa33b934f44a7a578a9d75eddfa803cf5738ccc5a08880e31c5131682e9b12a8d4fa47460b0d4c4130038a7d71cbfb7a981e6b3671bf0f145657cdecf39"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r4, 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r5, 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r5, 0x400c330d, &(0x7f0000000340)={0x6, 0x5}) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000300)={r0}, 0x8) 14:20:27 executing program 4: setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000)=0x800, 0x4) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x3, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0xf, "06d9497ade4ed1f8c714d8cd1e0097"}, &(0x7f0000000100)=0x17) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYBLOB="9b0000006bb29dee419e46ceef1574db592f92624cd341f8e3244485201c7ea33b420fb422bbfb755ebf0a1b6a7916dcd2fa156dfc3dde7076375bcd151011aeaa4d771c68fbd2149cb5012eba06b4a57141ba846b2b522d6611ae9d9ad1253d146bc7d94738d18e0ca08d0f4727a22f74c6a39dc7c67f8b10d1a57bcb00acf9c34ae9c1e26b8b3f27a2c8c1093d087683da257b0aa0ab18b4f3ec8641f703"], &(0x7f0000000200)=0xa3) read$snapshot(r0, 0x0, 0x0) 14:20:27 executing program 2: read$snapshot(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) 14:20:27 executing program 1: read$snapshot(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="01000600", @ANYRES32=0x0], &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000400)={r0, @in6={{0xa, 0x4e23, 0x6, @private1, 0x81}}, 0x2bf, 0x810}, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000004c0)=@assoc_value, &(0x7f0000000500)=0x8) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f00000003c0)) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x6c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/94, 0x5e, 0x0, 0x1d}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000100)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x2}, @decrefs={0x40046307, 0x3}, @increfs={0x40046304, 0x1}], 0x70, 0x0, &(0x7f00000001c0)="82e0a75ed3b97b0ac81fc5fc222c9b01ef1fee485c95115396205128db3cc3636a51e3da91d30d99800d49474888ac84a078baa33b934f44a7a578a9d75eddfa803cf5738ccc5a08880e31c5131682e9b12a8d4fa47460b0d4c4130038a7d71cbfb7a981e6b3671bf0f145657cdecf39"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r4, 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r5, 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r5, 0x400c330d, &(0x7f0000000340)={0x6, 0x5}) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000300)={r0}, 0x8) 14:20:27 executing program 0: read$snapshot(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="01000600", @ANYRES32=0x0], &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000400)={r0, @in6={{0xa, 0x4e23, 0x6, @private1, 0x81}}, 0x2bf, 0x810}, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000004c0)=@assoc_value, &(0x7f0000000500)=0x8) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f00000003c0)) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x6c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/94, 0x5e, 0x0, 0x1d}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000100)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x2}, @decrefs={0x40046307, 0x3}, @increfs={0x40046304, 0x1}], 0x70, 0x0, &(0x7f00000001c0)="82e0a75ed3b97b0ac81fc5fc222c9b01ef1fee485c95115396205128db3cc3636a51e3da91d30d99800d49474888ac84a078baa33b934f44a7a578a9d75eddfa803cf5738ccc5a08880e31c5131682e9b12a8d4fa47460b0d4c4130038a7d71cbfb7a981e6b3671bf0f145657cdecf39"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r4, 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r5, 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r5, 0x400c330d, &(0x7f0000000340)={0x6, 0x5}) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000300)={r0}, 0x8) 14:20:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x2, 0x0, 0x4fbb}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000014c0)='NLBL_UNLBL\x00', r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x44, r3, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x811}, 0x8000) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001340)='nl802154\x00', 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x30, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="20002cbd7000fddbdf250c00007ce70006000000000002000000080001000000000008000b000000000408000b00ffffff7f08000300", @ANYRES32=r8, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000b0001000000"], 0x50}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) sendto$isdn(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x1, "a37cd0fff0bca9b5215543be603ddf86397304d5b242910578950d5b4ff115bcece9fcfb728a2a76d07d7dfd27c27c02d78ae9ceaf6be3168d3b2b90562a12cc386d214a8b42f544c38d37cfe6f2937c6c2baadee10211c453de5ba316eac6bc6cafecc6070c8a5159cda53807ca0eb9768de9826e539622c5748e90ada8a4fdf9ec8de8e21f9ffd155a9aae27c522dd22a10a5dcdc2df1350585ab0c5316907c7863681f10b665ef13c2d2eeb3abcc1bf7965c17f4c4165d3481928014e15e4042765d573e7cf5fb2b77c7139e29464e7ac91398df1096a25b81c3b74df84edd45863968793cd54c19db5f55fa2c8196fea25a0c03d1e4c8c06aedfef54a4cb1603852c9428f2af360d1f1c5ad502a3cd545887911fe339fe27aa0e5b921534602e113793379d8c797c4bc9ff913d372db2c96cfdb9a8a8b3119a1c4aaf840f8efc64afd09e3225983842bac561bc1035fdf868eab4c4a67f42c7be0462d06ba378d583779b7ceec1f0734c9a3914a4cf695371dbb71f2addc3a0e2a7e7bdb1654799905d1f73761ca75bbe90f65dcde255cbe076dd2611454fd44417fe6986b4be2e22d763d8dc73d1136e3711cb3fb994ad410e76de4d98349e3242fa1d07d3c8abb3e7f503586cb600db216c0c1a55d1191a5dd2995b7b3559471609e3d02543ae56510ec65e41630c11337369af9a866b941192a4afed5877ba67aa3b90be6bed618b2892f81e573718cf19ba5056a4456e06a03e5cceca19b01566fc13d41255efaf9c946ecf5ebf1723492755c8b51530864463b186264d347056b518c182563f2a3c1ccf563001a4fb6d3ce38db6c108aa6a3311a9e8d12ecf4b30608c06fce825936ae5fcc30128fbe3e80adea74d87c609a0f583ce4bc23db0f6008dcb64c5fb052df0a75ac0c7a523e9953c4f1548fb413500b14738b2e9a3c3963a039f57226c21e99f7d1fbb36aa7ad6b15f9d1025e9272cbbce752a58fecd38efa55bb54d98c7381a3e6ca5fc51b39394bc4b1a067d18c9ccfb47ad84c5690607e2bafb39fdd0afb615e4810d38e7067230a07b19312117b79b14d2429c7b3136d0075da078f195eb1b8763f4236cfa09232d6dadcc8e664038803967e5fdbf77bb79b855d6fff0144a3c5293a9cbe3bf654be2e0b807b927eb9a34f6a736fcad2b4b9cc35398254f3b1badd6396f2502e722167d4989a9d5040ff1f89f3852e612e356319c19691fc9052c04d1eefdb4e48e8e0808cd680ca7d15cbb11174938f0dee1be63951a71cf984b547ae723b35737617ea3ade00242760b772a337891a0fee6e72d67ce39f402fe13a6b3f994336b8a0be613a12c673b231d07161d4e87e314aca1d7e91c2e1b10646ca29da14316366c6dc3a5fbba21138cba0319db2d4ca8397af4347128bad7a4e1924c5bd2c230d9600f15fe8a59fb7f77bf9cc5a05377dff10d95e9cb0a4be30edc34c5e31215d37ec589c9894dca5d122b3fc3b5d71462b024fb1d4014a1a57400529091d5d78bef317a266e92535c7779f1266ebc9cf0a717481d34fdcda85f57d08219c05d2f6802867ec6f6825811c92e90ef49ad3f1041a8010d1ddf0ab2f08ef72c81e9f66ff9e83438791b9300e5c20f0ad33d2a9c779cc7ccbef4a6e266e0fe4e20652522151b41be0309a10a93a9a50997629e9b72041003e67178b40dc02f53a9a9501a3f10b70b23d14944063f00911c911d76cc10642e8f37070611f5c49c0eaa1d4d975bb768f158c05a6d30680508123b995d6bffbc82c73776504068f17647ea6f7ba57ca9daa47a6778cd4ffb29e49dfa4aae931d4590a6f94d70fb62b07860061ec9645ff66249b146ccda209960ad9ab6dfc8362e4a1b11a5c0fb0ecfdd927a7af1f664ed98670f7b07354a8c0ed45b9ee7900aefa08b437deb22c7ead5ce12bfcee33106406a24908da1897660d520fdeea10529eba6c40cd252be5df679cd7681e0814685c50871684971e4d7c0f65f0e32718a0dc45ee4a5285becb4f632569f886101b59cdcdf130b49eae4b8bd4764575d6cd942112f9691c82014ab2744480920f5df11b007f4d313a9da466a845ed9bd3727a23741bb248e1f249aebdfd9b7358b4a491f4f4ae6a37dcd0db367082a50b346d3a77e2187a06687b5e9795fad76c7f9f16aefe1e167d75d75513db49a7ea7ed4a2d610c00bb8535cbb09b7615ce416397bc169cf7df765d1a38ef3af87f6f5acfec4ee70ff15605cd703fb29ae94abb041f2b81ee48b7085886afeb19b13b927af95bd6daf77b656fe4719d72ea056e174adf438c753fc9c7dca8a899ed7dea4e46595671b49f49de9aaac777eecf87fdd203cf8729d2bfa79dc894c2f423ecfac55b02f91f496fc6f171857cc5c4e6843d500b13e4f8dd5c0d7a73d3852ea915f4ad612ccca61a4dbb43c62a4ee0c4eb0c40bf86da755f24eccf45552600ff91023ffe2054fda04a4052b89753d8cb2788f951c5f8cc4ac11187a6a5762a312dafff4d980709a2ef23cfa8c72e5955506751242b1e03052228ed8a6394e83faefe2b1e358b102878b561f5bfbd4ff132516d619d1c4ca3ac97c000a5a5064869a9b1db38068994aab193a7a3ead82fb53d1cb7ec1803929f2bdb3f6e1db08232546094726490a178d32c2b94f355b6f9f2c7abd203dc1960b99204bab87aab6864bbdba53ded9fd0e6a50c088f50c69b941333760a144ce4957a72fea639eb99a292ffdd5706653a218fbff8b08d8afb75cc904d862d1ecb65d9018f6c654f2a022972d3febac6f01bdc5ea5d9c699cda6824feba22c7c3a4ba9e4cb54398688f7de927de3d1ef2d9b6eb0c79cacc507036a8870052bbd96aa4e852921609c2a0c2d21acb2acc27c17b01008a62cc60e0cc30b9783ecc2603788270633089c677ffde2ec4b33ae2c6771f6ab5873f9f0b5f3fe31de665792fc143bb2f7e4f228730d91f0bd41e68e8b70783630f04f68b8f4977fb5d3974811b9bdf85730acd7345ea358539fb97b198a89b53517a1ec213642fb4ac206f2b687c6aa3ce1a0e35bfec8665739a8cafc30a8d3fb1b12687e00b3ba1c9a07d7c0209e8b77ea20b2ea7b2225cd10e1bd2447155c49623d0bc424804795605febea0ca87034420784574ba688c9ec9c023c024ceb95da7d9a0945b5e712c782a298c4764c22c314e026fcf3048aec0b16e41221d39bdb36588bc766bb50a2788df62f30a4ea88a68b620664a7b974f2ae082fcb4bee08e5da7a184006a49009d0f68b8396375041bbbc6eefd73e9d397da3fdb275e6f7f3a8a83f83bd62ab579bfcacc61dac5805fb2fb414532e7fb197e4b5ab8f8bc20c7a22c5d289bc0702f8163216ef60611dff67068d9e8858c3ba17ba80ec51ac8113285889c25b58c2e269a4ee1d9d75c5a018406cce0c723abb54ab4784f92e13f250bc9ce5b3fbe63f8afcd54dd94485bc1a5a39b944b144b96b68c48863a7a05dcea2683a2960af0d9963b5330dcb94926b5996e5d836d8321816a19cc6ea3bf94b021eaa64e24c569440bc05664142e156e4eaf2d5b2976847a4cc069de85fa8f35a73fe18d7d0a0915711c80d8774d9eb8ba5bdc2b5dd9a1cb528e03174841b57f254ead5d740578809bf37b03d32e703eceb3fc06a8025ad55305d5cd01de83d0b599203bad8842788c906ae6c7feb863abd668e51d9f309ac7463c9725f0966b824197feb155be669dfcdf028ec18a7447184367e831aa9273abd1b276f2ac2739d108b4bb9fa423ec0b4f4ee1401100b44d5f50a8529535f4f479197657a9417724b34630537d0905e3e68ec5787ffe2ac59269a8a71b00332053d29ac3db1b2daee8ddbf9567229601bb90f7ed4bb72fbbbdae2dcc9972219eb4aafb7b6c9ae55e1a7de298ebadec0de7d67ce96f8146976e40cac49863d13b82079a9c1e20a9f078cdd895789e53044f0bd9b4a24167f400ffa94f5e8a7b45a2a4a9239fd6bd33a1d21a1c7a7c4265c2239f8db67fe7a1dd672da7c59d4f555122ed83c2cb8d4fd06430d19ea23a1522170b043e5310fe47e0fd1bd97495c65e2e4c50bb2edf60e0906decf2239515eeb70fdc20fca60de8e719a1e8ab1b4cdd5d5026630e84b1615404f7aa52dbd710d5de22b98b24adcaec4c85cf8f5b3a7abe796bc4093c8a6814da582d61a7cfb9f9692952ea86aa1cae5fbe9ed7b1fea017467794cd26b68602993a1a3c6f293665b2814433e50634750961011f315b2c83a23a72c453557139cc5456d8640b7600f50d0f6357c6154e29a7d3a0163ba0c91591f5395f91d71ca4c37455b8aecfda535c31c1bc3e3b8d196f5bf4d6e94eb911a6aed8c51a8a1bf072d599ddac125bfddfe929450ab70f654badd4961ed475e3244de85a9df0023c96ebc16da5c9655102f2017aba9af9eab55beb62a3e3b8119a39e583028bb4faf6315a81269ec56bdb09757aab9c4e6a1fa854a1a83d36f8b55b564b435b6cec923274ae9650b08bc05531c270c819565fccfd58a19422a451f37f2454e978748f0e5c2fc62132bd21df7fefa57f85a40ae2e4a7d466dffa0f94d53c2ea8de041e153cc480f12ed8d0fbebe57a2e7e4433cc8de840ebad685eb87e14fdcae004bd94fd2a709a0dd3b34b2711a2a6199c518a5bccdd14ec68ae4e76880b1c559196a0d9940cba76318590100ef20b8fc3cfd3b7861c816aae3e675f70a51bfb227081e206927a46965d5dde8472b8b7d889f4f72892570dd75a7ace775f88999840e999e27de5415f52b5847fb8decad6d4faccfcffad53f17f239c01f378639f6343beefa1afcd6cc3dba1d993f234f44970ac9033db47e8fbb1c6a91c8db65ae48bfaca73dbccc4bf25330818ba8904a23f81d9ffc93e444e9bd27192e4f8eae4f207127ac8af26e2a5147d6c45d6844df3a4227de46d937840aee0c035dd62963e880a869b66bc1b0c3ad32515b27fecc92089a1ee41454bef809d56ce2375ee9698550916b9d011e9ed2befda0775d44ce037953f1369a7cc77b189b78071b9b3322b86c68e15bb98d51094a97c04206e52d8341400edd652b6c694f494b9de0c42d0bc8243fbe2725c65a52a155c338fc33d23161c711921a12405bc850c2f5258f29e934c0ad6cdc2949c9da2417bf0ffc58346fae3449c052656d5839e5b2ab37bccda00b02340efda4d7081c2eb682a983e5ab1641b9c90bc63aff2a7d9d35e58a29fc927d224f6c1501be2f1f8c912099ee9cef112978fc1082af71ff0639d2793551a313650168d1c9ccfae36d064ab0622da3960d83816f91130dcc59874cac1435048acedbb5a7d0eaffd1afad03047cd842c0761478e3e81f244b26167c6da527a119a8da2015560147332dbef49f92bcb1bd3910e3205585e8674306cb658d7fc453917ac2d210f6b8b64ae6b168266b08daa80c503c972bd8a196d32e3c962fce1d9c24820f50348d8766be483cc69ea92b450974a20953ed2f120aa43d720f9dfbc403353ca2f48e6967b2f26177afbfa495d55dda0e22f48e255950c7ff9888073649af721d699536202b0cffd27784f2782b194e638930254dd6ebd0274f11ec1ea2113751b787c9cc10be0afa067239290ac5659f9b433db82ab9ffee04911b6a71738afc2f1cc1abd609cd4f7569964c2520a05702c22f1e5b0065ac39f9e1502a1dc192e158a5d6238b896192c5c0a6396d7e82369847905b5540c148233414a795038c796a474343b678018a6b8ad7cff44e65e5b097539ee6a029852bdc0e80e7a77ebecac7a1862eaaac66b6495e8087c5"}, 0x1008, 0x44000, &(0x7f0000000000)={0x22, 0x7, 0x3f, 0x4}, 0x6) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000001100)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x3, 0x6}, &(0x7f0000000040)=0x90) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r9, 0x84, 0x1a, &(0x7f00000011c0)={r10, 0xcb, "382992e48ac47787414205636fd8428d4563b8b3be843dc4d3811f808149a98094027eea5d9f2c07da625168d9d0e134c0a48a6cf25742b0598514bdfe7b58c954d41241b70b0d1df48efd87e58c80aa0d01cf5ce56e51fb1f62c142ae634376037bcdc41a9c85644f5ef2b23bb0d8dc9d1b9f81ffbf6dadad65538042fa95c04b39104466e54378adaa53d968b3626fe273fc72cdb652a2f5aa5b73749c58e743ede4773f4bab56a5506472e271cb78755c95dc4685f7c6e4e4b38b83ed6fb4cb9af64ef86548aff10836"}, &(0x7f00000012c0)=0xd3) 14:20:27 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000012c0)={0x74, 0x0, &(0x7f0000001140)=[@acquire={0x40046305, 0x3}, @exit_looper, @dead_binder_done, @clear_death={0x400c630f, 0x200001}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001080)={@fda={0x66646185, 0x8, 0x1, 0x3b}, @flat=@weak_binder={0x77622a85, 0x10a, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000080)=""/4096, 0x1000, 0x1, 0xb}}, &(0x7f0000001100)={0x0, 0x20, 0x38}}, 0x1000}], 0xf0, 0x0, &(0x7f00000011c0)="685bda133b8977b47148df2ae539dadca55d1cd633ddda6d10a6a49fa697f385f57245867dc2a9fd257051d15384919b421e6cd6595dc414e84763e04f63023d9514f8b28bf19610b34435278f74c21e958feb030c8dcfdd7575a0d1d67b780302503f5083723247982bdd4a7d9698fc6c45fa262b69a62ad2017ae125bc498a41faf5f2bfb0f4ef7e6ef11c24af95c503edc8e10ff8392c6b97bdad188373896d638a8939dc28990b080bb2032ae1c03e654d73886c4f7620412ec066889a39d66d3e9b8c66a03f51963cf42a1eba630c02f80af01c06c8383b1ef5dd3089eafed7677d64612d7afccd7b49dee0040e"}) read$snapshot(r0, 0x0, 0x0) read$snapshot(r0, &(0x7f0000001300)=""/193, 0xc1) 14:20:27 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) read$snapshot(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x3c, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) 14:20:27 executing program 0: read$snapshot(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="01000600", @ANYRES32=0x0], &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000400)={r0, @in6={{0xa, 0x4e23, 0x6, @private1, 0x81}}, 0x2bf, 0x810}, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000004c0)=@assoc_value, &(0x7f0000000500)=0x8) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f00000003c0)) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x6c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/94, 0x5e, 0x0, 0x1d}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000100)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x2}, @decrefs={0x40046307, 0x3}, @increfs={0x40046304, 0x1}], 0x70, 0x0, &(0x7f00000001c0)="82e0a75ed3b97b0ac81fc5fc222c9b01ef1fee485c95115396205128db3cc3636a51e3da91d30d99800d49474888ac84a078baa33b934f44a7a578a9d75eddfa803cf5738ccc5a08880e31c5131682e9b12a8d4fa47460b0d4c4130038a7d71cbfb7a981e6b3671bf0f145657cdecf39"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r4, 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r5, 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r5, 0x400c330d, &(0x7f0000000340)={0x6, 0x5}) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000300)={r0}, 0x8) 14:20:27 executing program 4: ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000000)) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000040)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:27 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) read$snapshot(r0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)) 14:20:27 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 14:20:27 executing program 0: read$snapshot(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="01000600", @ANYRES32=0x0], &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000400)={r0, @in6={{0xa, 0x4e23, 0x6, @private1, 0x81}}, 0x2bf, 0x810}, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000004c0)=@assoc_value, &(0x7f0000000500)=0x8) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f00000003c0)) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x6c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/94, 0x5e, 0x0, 0x1d}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000100)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x2}, @decrefs={0x40046307, 0x3}, @increfs={0x40046304, 0x1}], 0x70, 0x0, &(0x7f00000001c0)="82e0a75ed3b97b0ac81fc5fc222c9b01ef1fee485c95115396205128db3cc3636a51e3da91d30d99800d49474888ac84a078baa33b934f44a7a578a9d75eddfa803cf5738ccc5a08880e31c5131682e9b12a8d4fa47460b0d4c4130038a7d71cbfb7a981e6b3671bf0f145657cdecf39"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r4, 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r5, 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r5, 0x400c330d, &(0x7f0000000340)={0x6, 0x5}) 14:20:27 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:27 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)) write$UHID_INPUT(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) read$snapshot(r0, 0x0, 0x0) 14:20:27 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x6, 0x8, 0x793, 0x2, r0, 0x3, [], 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x40) read$snapshot(r0, 0x0, 0x0) 14:20:27 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000012c0)={0x74, 0x0, &(0x7f0000001140)=[@acquire={0x40046305, 0x3}, @exit_looper, @dead_binder_done, @clear_death={0x400c630f, 0x200001}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001080)={@fda={0x66646185, 0x8, 0x1, 0x3b}, @flat=@weak_binder={0x77622a85, 0x10a, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000080)=""/4096, 0x1000, 0x1, 0xb}}, &(0x7f0000001100)={0x0, 0x20, 0x38}}, 0x1000}], 0xf0, 0x0, &(0x7f00000011c0)="685bda133b8977b47148df2ae539dadca55d1cd633ddda6d10a6a49fa697f385f57245867dc2a9fd257051d15384919b421e6cd6595dc414e84763e04f63023d9514f8b28bf19610b34435278f74c21e958feb030c8dcfdd7575a0d1d67b780302503f5083723247982bdd4a7d9698fc6c45fa262b69a62ad2017ae125bc498a41faf5f2bfb0f4ef7e6ef11c24af95c503edc8e10ff8392c6b97bdad188373896d638a8939dc28990b080bb2032ae1c03e654d73886c4f7620412ec066889a39d66d3e9b8c66a03f51963cf42a1eba630c02f80af01c06c8383b1ef5dd3089eafed7677d64612d7afccd7b49dee0040e"}) read$snapshot(r0, 0x0, 0x0) read$snapshot(r0, &(0x7f0000001300)=""/193, 0xc1) 14:20:27 executing program 3: geteuid() r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000000000)) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f00000000c0)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x6, 0x0, 0x81, 0x5524, 0x42, 0x1, 0x1, [], 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x40) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r3, 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r4, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18240000", @ANYRES32=r1, @ANYBLOB="0000000052020000181a0000", @ANYRES32=r2, @ANYBLOB="00000000000000005c020000040000008500000029000000182b0000", @ANYRES32=r3, @ANYBLOB="0000000500000002000000000000000400000065e4080008000000"], &(0x7f00000001c0)='GPL\x00', 0x1000, 0x0, 0x0, 0x40f00, 0x16, [], 0x0, 0x18, r5, 0x8, &(0x7f0000000200)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x1, 0x0, 0xf874}, 0x10, 0x28704}, 0x78) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x9, 0x4) 14:20:27 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:27 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x2}, &(0x7f0000000040)=0x8) read$snapshot(r0, 0x0, 0x0) 14:20:27 executing program 0: read$snapshot(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="01000600", @ANYRES32=0x0], &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000400)={r0, @in6={{0xa, 0x4e23, 0x6, @private1, 0x81}}, 0x2bf, 0x810}, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000004c0)=@assoc_value, &(0x7f0000000500)=0x8) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f00000003c0)) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x6c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/94, 0x5e, 0x0, 0x1d}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000100)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x2}, @decrefs={0x40046307, 0x3}, @increfs={0x40046304, 0x1}], 0x70, 0x0, &(0x7f00000001c0)="82e0a75ed3b97b0ac81fc5fc222c9b01ef1fee485c95115396205128db3cc3636a51e3da91d30d99800d49474888ac84a078baa33b934f44a7a578a9d75eddfa803cf5738ccc5a08880e31c5131682e9b12a8d4fa47460b0d4c4130038a7d71cbfb7a981e6b3671bf0f145657cdecf39"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r4, 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r5, 0x0, 0x0) 14:20:27 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:27 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000012c0)={0x74, 0x0, &(0x7f0000001140)=[@acquire={0x40046305, 0x3}, @exit_looper, @dead_binder_done, @clear_death={0x400c630f, 0x200001}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001080)={@fda={0x66646185, 0x8, 0x1, 0x3b}, @flat=@weak_binder={0x77622a85, 0x10a, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000080)=""/4096, 0x1000, 0x1, 0xb}}, &(0x7f0000001100)={0x0, 0x20, 0x38}}, 0x1000}], 0xf0, 0x0, &(0x7f00000011c0)="685bda133b8977b47148df2ae539dadca55d1cd633ddda6d10a6a49fa697f385f57245867dc2a9fd257051d15384919b421e6cd6595dc414e84763e04f63023d9514f8b28bf19610b34435278f74c21e958feb030c8dcfdd7575a0d1d67b780302503f5083723247982bdd4a7d9698fc6c45fa262b69a62ad2017ae125bc498a41faf5f2bfb0f4ef7e6ef11c24af95c503edc8e10ff8392c6b97bdad188373896d638a8939dc28990b080bb2032ae1c03e654d73886c4f7620412ec066889a39d66d3e9b8c66a03f51963cf42a1eba630c02f80af01c06c8383b1ef5dd3089eafed7677d64612d7afccd7b49dee0040e"}) read$snapshot(r0, 0x0, 0x0) read$snapshot(r0, &(0x7f0000001300)=""/193, 0xc1) 14:20:28 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snd/timer\x00', 0x600000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000040)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000080)=0x5d, 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0x82, "d58c8b8c32a7bed8ce5d8be56902150097e3615692acbdc3ba2686be1ee130573be9abfb354941e3db83218c38560cdeed595a19421746be9f4b2f9af70fdb106621e4401f9ce9defc517cf99d5cd6b5f75e4e0c568f10553027258e96e3a8efddc9e3097a447ed7db67712b75a9dde6623766a1af40c2fa27aa724aa9da053ece84"}, &(0x7f0000000280)=0x8a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000002c0)={r4, @in6={{0xa, 0x4e21, 0x7, @empty, 0x7}}, [0x100000001, 0x1000, 0x1, 0x1, 0x8, 0x1, 0x9073, 0x2, 0x401, 0x1f, 0x3, 0x7, 0x40, 0x2, 0x3]}, &(0x7f00000003c0)=0x100) read$snapshot(r0, 0x0, 0xffffffffffffff18) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100)='l2tp\x00', r5) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r6, 0x40045402, &(0x7f0000000180)=0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000400), &(0x7f0000000480)=0x4) 14:20:28 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000000)={0xa, {0x6, 0x3, 0x8}}, 0xa) 14:20:28 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x3, 0x7, 0x40, 0x0, 0xff, 0x4, 0x6, 0x7, 0x2, 0x40, 0x2, 0x9, 0x6, 0x8}, 0xe) read$snapshot(r0, 0x0, 0x0) 14:20:28 executing program 0: read$snapshot(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="01000600", @ANYRES32=0x0], &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000400)={r0, @in6={{0xa, 0x4e23, 0x6, @private1, 0x81}}, 0x2bf, 0x810}, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000004c0)=@assoc_value, &(0x7f0000000500)=0x8) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f00000003c0)) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x6c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/94, 0x5e, 0x0, 0x1d}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000100)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x2}, @decrefs={0x40046307, 0x3}, @increfs={0x40046304, 0x1}], 0x70, 0x0, &(0x7f00000001c0)="82e0a75ed3b97b0ac81fc5fc222c9b01ef1fee485c95115396205128db3cc3636a51e3da91d30d99800d49474888ac84a078baa33b934f44a7a578a9d75eddfa803cf5738ccc5a08880e31c5131682e9b12a8d4fa47460b0d4c4130038a7d71cbfb7a981e6b3671bf0f145657cdecf39"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r4, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 14:20:28 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) read$snapshot(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) 14:20:28 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x2, 0x0, 0x4fbb}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000014c0)='NLBL_UNLBL\x00', r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x44, r3, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x811}, 0x8000) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001340)='nl802154\x00', 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x30, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="20002cbd7000fddbdf250c00007ce70006000000000002000000080001000000000008000b000000000408000b00ffffff7f08000300", @ANYRES32=r8, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000b0001000000"], 0x50}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) sendto$isdn(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x1, "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"}, 0x1008, 0x44000, &(0x7f0000000000)={0x22, 0x7, 0x3f, 0x4}, 0x6) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000001100)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x3, 0x6}, &(0x7f0000000040)=0x90) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r9, 0x84, 0x1a, &(0x7f00000011c0)={r10, 0xcb, "382992e48ac47787414205636fd8428d4563b8b3be843dc4d3811f808149a98094027eea5d9f2c07da625168d9d0e134c0a48a6cf25742b0598514bdfe7b58c954d41241b70b0d1df48efd87e58c80aa0d01cf5ce56e51fb1f62c142ae634376037bcdc41a9c85644f5ef2b23bb0d8dc9d1b9f81ffbf6dadad65538042fa95c04b39104466e54378adaa53d968b3626fe273fc72cdb652a2f5aa5b73749c58e743ede4773f4bab56a5506472e271cb78755c95dc4685f7c6e4e4b38b83ed6fb4cb9af64ef86548aff10836"}, &(0x7f00000012c0)=0xd3) 14:20:28 executing program 3: getpgrp(0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:28 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:28 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x1bc, @local, 0xfffffffe}, @in6={0xa, 0x4e23, 0xfffffff9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x1ff, @dev={0xfe, 0x80, [], 0x36}, 0x81}, @in6={0xa, 0x4e20, 0x6, @ipv4={[], [], @multicast2}, 0x4}], 0xb0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f00000001c0)={0x1, [0xffff]}, 0x6) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r3, 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000180)=0x4) read$snapshot(r0, 0x0, 0x0) 14:20:28 executing program 0: read$snapshot(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="01000600", @ANYRES32=0x0], &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000400)={r0, @in6={{0xa, 0x4e23, 0x6, @private1, 0x81}}, 0x2bf, 0x810}, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000004c0)=@assoc_value, &(0x7f0000000500)=0x8) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f00000003c0)) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x6c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/94, 0x5e, 0x0, 0x1d}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000100)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x2}, @decrefs={0x40046307, 0x3}, @increfs={0x40046304, 0x1}], 0x70, 0x0, &(0x7f00000001c0)="82e0a75ed3b97b0ac81fc5fc222c9b01ef1fee485c95115396205128db3cc3636a51e3da91d30d99800d49474888ac84a078baa33b934f44a7a578a9d75eddfa803cf5738ccc5a08880e31c5131682e9b12a8d4fa47460b0d4c4130038a7d71cbfb7a981e6b3671bf0f145657cdecf39"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r4, 0x0, 0x0) 14:20:28 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f0000000280)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x6) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="03000000070003007f00"], 0xa) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000100)={0x3, [0x0, 0x1, 0x14f3]}, 0xa) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x8008, 0x100, 0x3f, 0x0}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r5, 0x1, 0x7fffffff}, &(0x7f0000000200)=0xc) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f00000002c0)={r6, 0x4}, &(0x7f0000000300)=0x8) r8 = socket(0x18, 0x0, 0x2) getpeername$l2tp6(r8, 0x0, 0x0) read$snapshot(r3, 0x0, 0x3d) 14:20:28 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x2, 0x0, 0x4fbb}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000014c0)='NLBL_UNLBL\x00', r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x44, r3, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x811}, 0x8000) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001340)='nl802154\x00', 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x30, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="20002cbd7000fddbdf250c00007ce70006000000000002000000080001000000000008000b000000000408000b00ffffff7f08000300", @ANYRES32=r8, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000b0001000000"], 0x50}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) sendto$isdn(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x1, "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"}, 0x1008, 0x44000, &(0x7f0000000000)={0x22, 0x7, 0x3f, 0x4}, 0x6) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000001100)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x3, 0x6}, &(0x7f0000000040)=0x90) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r9, 0x84, 0x1a, &(0x7f00000011c0)={r10, 0xcb, "382992e48ac47787414205636fd8428d4563b8b3be843dc4d3811f808149a98094027eea5d9f2c07da625168d9d0e134c0a48a6cf25742b0598514bdfe7b58c954d41241b70b0d1df48efd87e58c80aa0d01cf5ce56e51fb1f62c142ae634376037bcdc41a9c85644f5ef2b23bb0d8dc9d1b9f81ffbf6dadad65538042fa95c04b39104466e54378adaa53d968b3626fe273fc72cdb652a2f5aa5b73749c58e743ede4773f4bab56a5506472e271cb78755c95dc4685f7c6e4e4b38b83ed6fb4cb9af64ef86548aff10836"}, &(0x7f00000012c0)=0xd3) 14:20:28 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:28 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40000, 0x0) write$snapshot(r1, &(0x7f00000000c0)="95b5982bfc640577309df98845d6de134bd593938d8afc43d8043a836ef5401fad94457757cf5a480d865109733390280792c151f283aa556dda14f715ed8a4debc8f8978d063caa1fbbd6cd7b785eebdeb21ceadfaf36686c0d47d342fae805b1ccdfb718b17ec77934fb48f720b8", 0x6f) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) 14:20:28 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000)=0x2, 0x4) read$snapshot(r0, 0x0, 0x0) 14:20:28 executing program 0: read$snapshot(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="01000600", @ANYRES32=0x0], &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000400)={r0, @in6={{0xa, 0x4e23, 0x6, @private1, 0x81}}, 0x2bf, 0x810}, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000004c0)=@assoc_value, &(0x7f0000000500)=0x8) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f00000003c0)) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x6c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/94, 0x5e, 0x0, 0x1d}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000100)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x2}, @decrefs={0x40046307, 0x3}, @increfs={0x40046304, 0x1}], 0x70, 0x0, &(0x7f00000001c0)="82e0a75ed3b97b0ac81fc5fc222c9b01ef1fee485c95115396205128db3cc3636a51e3da91d30d99800d49474888ac84a078baa33b934f44a7a578a9d75eddfa803cf5738ccc5a08880e31c5131682e9b12a8d4fa47460b0d4c4130038a7d71cbfb7a981e6b3671bf0f145657cdecf39"}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 14:20:28 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:28 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000080)={0xa, {0xa, 0x4, 0x2}}, 0xa) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x3, @remote, 0x7}, @in6={0xa, 0x4e22, 0x1f, @private1, 0x1}], 0x38) read$snapshot(r1, 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r2, &(0x7f00000002c0)={0xe, {0x3, 0x0, 0x1f}}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x83}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x800) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000140)={{0x0, 0x1, 0x6, 0x3, 0x8000}}) 14:20:28 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 14:20:28 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f0000000280)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x6) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="03000000070003007f00"], 0xa) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000100)={0x3, [0x0, 0x1, 0x14f3]}, 0xa) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x8008, 0x100, 0x3f, 0x0}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r5, 0x1, 0x7fffffff}, &(0x7f0000000200)=0xc) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f00000002c0)={r6, 0x4}, &(0x7f0000000300)=0x8) r8 = socket(0x18, 0x0, 0x2) getpeername$l2tp6(r8, 0x0, 0x0) read$snapshot(r3, 0x0, 0x3d) 14:20:28 executing program 0: read$snapshot(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="01000600", @ANYRES32=0x0], &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000400)={r0, @in6={{0xa, 0x4e23, 0x6, @private1, 0x81}}, 0x2bf, 0x810}, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000004c0)=@assoc_value, &(0x7f0000000500)=0x8) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f00000003c0)) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x6c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/94, 0x5e, 0x0, 0x1d}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000100)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x2}, @decrefs={0x40046307, 0x3}, @increfs={0x40046304, 0x1}], 0x70, 0x0, &(0x7f00000001c0)="82e0a75ed3b97b0ac81fc5fc222c9b01ef1fee485c95115396205128db3cc3636a51e3da91d30d99800d49474888ac84a078baa33b934f44a7a578a9d75eddfa803cf5738ccc5a08880e31c5131682e9b12a8d4fa47460b0d4c4130038a7d71cbfb7a981e6b3671bf0f145657cdecf39"}) 14:20:28 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000040)={0xe, {0x7, 0x7f, 0x7, 0x30, "ccafef7541b0444a2d0c525d26fedfa9069671820307c69d9de5ed9f1b952a4a2c20566943a87030267d01ee583da29f"}}, 0x3c) read$snapshot(r0, 0x0, 0x0) 14:20:28 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x7f, 0xfff8}, &(0x7f0000000000)=0x90) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000140)={r1, @in={{0x2, 0x4e21, @multicast1}}, [0x3f, 0x8, 0xa46, 0x80, 0x100000000, 0x4, 0xf2, 0x100000000, 0x7fff, 0xb7, 0x9, 0x9, 0x1, 0x4, 0xff]}, &(0x7f0000000240)=0x100) 14:20:28 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000)=0x2, 0x4) read$snapshot(r0, 0x0, 0x0) 14:20:28 executing program 3: connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={[], 0x11}}, 0x8) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000080)) 14:20:28 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, [], 0x44}, 0x3f1c}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e24, @remote}], 0x3c) read$snapshot(r0, 0x0, 0x0) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000040)={0xe5e, 0xffffa36e}) 14:20:28 executing program 0: read$snapshot(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="01000600", @ANYRES32=0x0], &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000400)={r0, @in6={{0xa, 0x4e23, 0x6, @private1, 0x81}}, 0x2bf, 0x810}, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000004c0)=@assoc_value, &(0x7f0000000500)=0x8) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f00000003c0)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 14:20:28 executing program 1: read$snapshot(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="01000600", @ANYRES32=0x0], &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000400)={r0, @in6={{0xa, 0x4e23, 0x6, @private1, 0x81}}, 0x2bf, 0x810}, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000004c0)=@assoc_value, &(0x7f0000000500)=0x8) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f00000003c0)) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x6c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/94, 0x5e, 0x0, 0x1d}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000100)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x2}, @decrefs={0x40046307, 0x3}, @increfs={0x40046304, 0x1}], 0x70, 0x0, &(0x7f00000001c0)="82e0a75ed3b97b0ac81fc5fc222c9b01ef1fee485c95115396205128db3cc3636a51e3da91d30d99800d49474888ac84a078baa33b934f44a7a578a9d75eddfa803cf5738ccc5a08880e31c5131682e9b12a8d4fa47460b0d4c4130038a7d71cbfb7a981e6b3671bf0f145657cdecf39"}) 14:20:28 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x80002, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0xfffffea4) 14:20:28 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = socket$isdn(0x22, 0x3, 0x24) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000000)={0x4007, 0x9, 0x5, 0x8000}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) bind$isdn(r2, &(0x7f0000000040)={0x22, 0xc6, 0x4, 0x80, 0xed}, 0x6) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000000c0)={0xe, {0xa, 0xe5, 0x4, 0xf, "559279169ab2cf1c2ea73a2d4887fd"}}, 0x1b) 14:20:28 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) 14:20:28 executing program 5: setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @broadcast}}}, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@int=0x61, 0x4) 14:20:28 executing program 1: connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={[], 0x11}}, 0x8) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000080)) 14:20:28 executing program 0: read$snapshot(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="01000600", @ANYRES32=0x0], &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000400)={r0, @in6={{0xa, 0x4e23, 0x6, @private1, 0x81}}, 0x2bf, 0x810}, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000004c0)=@assoc_value, &(0x7f0000000500)=0x8) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f00000003c0)) 14:20:28 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:28 executing program 0: read$snapshot(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="01000600", @ANYRES32=0x0], &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000400)={r0, @in6={{0xa, 0x4e23, 0x6, @private1, 0x81}}, 0x2bf, 0x810}, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000004c0)=@assoc_value, &(0x7f0000000500)=0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x101000, 0x0) 14:20:28 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:28 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 14:20:28 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000040)=""/100, &(0x7f00000000c0)=0x64) read$snapshot(r0, 0x0, 0x0) 14:20:28 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x2, 0x0, 0x4fbb}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000014c0)='NLBL_UNLBL\x00', r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x44, r3, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x811}, 0x8000) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001340)='nl802154\x00', 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x30, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="20002cbd7000fddbdf250c00007ce70006000000000002000000080001000000000008000b000000000408000b00ffffff7f08000300", @ANYRES32=r8, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000b0001000000"], 0x50}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) sendto$isdn(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x1, "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"}, 0x1008, 0x44000, &(0x7f0000000000)={0x22, 0x7, 0x3f, 0x4}, 0x6) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000001100)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x3, 0x6}, &(0x7f0000000040)=0x90) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r9, 0x84, 0x1a, &(0x7f00000011c0)={r10, 0xcb, "382992e48ac47787414205636fd8428d4563b8b3be843dc4d3811f808149a98094027eea5d9f2c07da625168d9d0e134c0a48a6cf25742b0598514bdfe7b58c954d41241b70b0d1df48efd87e58c80aa0d01cf5ce56e51fb1f62c142ae634376037bcdc41a9c85644f5ef2b23bb0d8dc9d1b9f81ffbf6dadad65538042fa95c04b39104466e54378adaa53d968b3626fe273fc72cdb652a2f5aa5b73749c58e743ede4773f4bab56a5506472e271cb78755c95dc4685f7c6e4e4b38b83ed6fb4cb9af64ef86548aff10836"}, &(0x7f00000012c0)=0xd3) 14:20:28 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) read$snapshot(r0, 0x0, 0x0) gettid() write$snapshot(r0, &(0x7f00000001c0)="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", 0xfffffff6) 14:20:28 executing program 0: read$snapshot(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="01000600", @ANYRES32=0x0], &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000400)={r0, @in6={{0xa, 0x4e23, 0x6, @private1, 0x81}}, 0x2bf, 0x810}, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000004c0)=@assoc_value, &(0x7f0000000500)=0x8) 14:20:28 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r3, 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000140)={0xe, {0x6, 0x6c, 0x9, 0xfb, "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"}}, 0x107) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000040)=0x5, 0x4) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f00000000c0)) read$snapshot(r0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 14:20:28 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x5c, 0x0, 0x1311, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x100}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x100}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4048004) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x30, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r3, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004804}, 0x800) read$snapshot(r1, 0x0, 0x0) 14:20:28 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) 14:20:28 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x2, 0x3, 0x1, 0x2, 0x5}}) read$snapshot(r1, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x210000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f00000000c0)) 14:20:28 executing program 3: r0 = socket(0x10, 0x80000, 0x1) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x100000001) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) 14:20:28 executing program 0: read$snapshot(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="01000600", @ANYRES32=0x0], &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000400)={r0, @in6={{0xa, 0x4e23, 0x6, @private1, 0x81}}, 0x2bf, 0x810}, 0x90) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000004c0)=@assoc_value, &(0x7f0000000500)=0x8) 14:20:28 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 14:20:28 executing program 1: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0xd1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) 14:20:28 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYBLOB="d300000014424c5b10b288e0a4a3fd69d0d24e2935053c278a54dd3a304049068885380c7b5f4e6ae1fa2d3157f080dc9f511381e1d37f2f8c894e64468c13865406e949fce16beaf0781a30ea82516f7a62b136fff475e1228057041a16547d71be27fe77daccfa2025f89f97d6062bb01f9db09548a73d8b321b705c0ee82980fa18ab9e9019bd4fa42881aff1c1090f2f11d6a134a853f340e071002047c214439ba3b758dd2e14f986f7462451e94568402a3dfadb8ae230360c10f08d303cd2b5120e99ee6d580302a5ec3defadc8a6dc65a2027f"], &(0x7f00000002c0)=0xdb) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r2, &(0x7f0000000380)={0x1f, @none}, 0x8) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x1) read$snapshot(r2, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r4, 0x0, 0x0, 0x80000) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(rmd160-generic,ctr(des3_ede))\x00'}, 0x58) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) 14:20:28 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f00000000c0)=[@acquire, @exit_looper], 0xa5, 0x0, &(0x7f0000000100)="56837ba2d603a6ac402268fbfcb483fe5bf441dc73ebc0a6a5021564b8f08239eef5dfde8c5c06ff44597cbac9639cd22ce33b314c68693646128757774d73f8c2404b969af0c011134129cf2f716eefd0cc56017299e5233b0a2477e8aa32897f67b7f83f297945374a4707c261d572c1c43f1d29e740212b9fd1c5a4211b1dd97fdc5d1951d60f9d87fa1bd4ff457b58528d351418fe7fe8c3bba50428bc28e84333fe52"}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x1, 0x0}, 0x8) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000200), &(0x7f0000000240)=0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r2, 0x4) write$UHID_INPUT(r1, 0x0, 0x0) read$snapshot(r1, 0x0, 0xfffffd64) 14:20:28 executing program 0: read$snapshot(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="01000600", @ANYRES32=0x0], &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000400)={r0, @in6={{0xa, 0x4e23, 0x6, @private1, 0x81}}, 0x2bf, 0x810}, 0x90) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000004c0)=@assoc_value, &(0x7f0000000500)=0x8) 14:20:28 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080075000800ffdbdf41dd5b466cb659250f000000000008000b0002000000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x8840) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000ffdbdf250300000008000b000900000008003900ff0100000500370000000000050035000100000005002a00010000000800390001f0ffff050038000000000008003200ff00000005002f000000000005002f0000000000056c7101a506140417725cf45a5cc4a9cccf96890370881165fa8b36e0f76d25fcb0ef2e27d4e5f8b6c14482569ee7f62270348c73fd97e8e6faafd3cce72b73d3e74e0ef8000a38eb1741670a87ff0b2805ea"], 0x64}, 0x1, 0x0, 0x0, 0x48044}, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:29 executing program 1: r0 = socket(0x10, 0x80000, 0x1) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x100000001) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) 14:20:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r2) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', r2) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="43170000", @ANYRES16=r6, @ANYBLOB="0100000000000000ff454f1818b541c02c148932aafa782fdf7e61cea500000d0000000c0006db9361c6ba3905156f279ac9705350f363c35da3195ed0c74b9dfb189197307c4aa182be94c65ff47be477f9f8e217a40d916d50bf9a49e92cb2d66ed31fcbe0e806d5bba25e95880d897507e3fb52e00d18de41143f040c02554766229d604107fb716148b40b617af0fc723f80423865fc0a2b0e25b7242a3f672cde274d753865a31c69ae5d152849b0afda4f5b423ba07ed33287291bad91931b0e1ef69c1eda9bfb594cf4a9e675d785899c7f040e4c48ec7ebe9276350b7f40ade55289593491d43ad0f565d4621dce7214", @ANYRES32=r8, @ANYBLOB], 0x30}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x30, r10, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x0, 0xf, 0x5}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xfc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="094468fa6d85661e9d0f2a74ea632c430621ed2e89d50d7aac163a8b4e3cc749905f1bedefbd5d0e83092fc62d2d05491f34539eed07f28a8f0139f80760c4871c2291b52930b43ae111cbd03e087322ad05bca3e26ae1d8d0d4010002d878683efd166ec4535d86466fc359ed", @ANYRES32=0x0, @ANYBLOB='\b\x00r/', @ANYRES32=r8, @ANYBLOB="08000300", @ANYBLOB="f93f7183f35b7ec95bf191afc451aabebfa0bb4104e6c3071450db3bd47450ae1bd957edd1016365ff55ce01bbffa5e449542338469e34231729b9a6b1cffdc3b5e9d5183f2f8c08397714e549048d79eb9cb82371b3c8605ea321c1b172", @ANYBLOB="207cf2ec2b8767fc28366c", @ANYRES32=0x0, @ANYRESHEX=r3, @ANYRES32=r11, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x8844}, 0x24004815) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="5efc2a05000000000000000000000005003300030000000a0001007770616e3000000008000200151610e1b5af269dd949a8322a177883793ca42f6c41ff50b81d5131f2", @ANYRES32=0x0, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x40850}, 0x4000000) r12 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r12, 0x0, 0x0) 14:20:29 executing program 4: prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) read$snapshot(0xffffffffffffffff, 0x0, 0x0) write$snapshot(0xffffffffffffffff, &(0x7f0000000000)="69d4bf225f0cd1c3d863d88343573807099e39c2", 0x14) 14:20:29 executing program 0: read$snapshot(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="01000600", @ANYRES32=0x0], &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000400)={r0, @in6={{0xa, 0x4e23, 0x6, @private1, 0x81}}, 0x2bf, 0x810}, 0x90) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000004c0)=@assoc_value, &(0x7f0000000500)=0x8) 14:20:29 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000)=0xfe8, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x90, "502f1b1a5eb0c4a87ff35d641055100ea6ce2b1aee07d3286d1a7199ec3136150c7a6f4d29b3709496aef0fd1d194dfbec27a2e2b0bc87c9041e5601804f74169104e0158715bc7ffd02ecf916c76acbb9df0e7ec14b44726d29b50b99be0e54023f9025c3ce33570fd787a872c34b9b0ebf375a28f3e72fe4d2ae37bb67573f669423e60d2387e86f5e4c1e0c8b36b9"}, &(0x7f0000000040)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000180)={r3, 0x1ff}, 0x8) read$snapshot(r1, 0x0, 0x0) 14:20:29 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f00000000c0)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000140)=0x1, 0x4) write$UHID_INPUT(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) 14:20:29 executing program 0: read$snapshot(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="01000600", @ANYRES32=0x0], &(0x7f00000002c0)=0x8) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000004c0)=@assoc_value, &(0x7f0000000500)=0x8) 14:20:29 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) read$snapshot(r0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) 14:20:29 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='btrfs_flush_space\x00', r0}, 0x74) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r2, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000001}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x6008024}, 0x880) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000000)) 14:20:29 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x61f, 0x101}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000100)={0x7c2, 0x87, 0x8, 0x7fff}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={r2, 0x3}, 0x8) 14:20:29 executing program 0: read$snapshot(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000004c0)=@assoc_value, &(0x7f0000000500)=0x8) 14:20:29 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080075000800ffdbdf41dd5b466cb659250f000000000008000b0002000000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x8840) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000ffdbdf250300000008000b000900000008003900ff0100000500370000000000050035000100000005002a00010000000800390001f0ffff050038000000000008003200ff00000005002f000000000005002f0000000000056c7101a506140417725cf45a5cc4a9cccf96890370881165fa8b36e0f76d25fcb0ef2e27d4e5f8b6c14482569ee7f62270348c73fd97e8e6faafd3cce72b73d3e74e0ef8000a38eb1741670a87ff0b2805ea"], 0x64}, 0x1, 0x0, 0x0, 0x48044}, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:29 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x80882, 0x0) read$snapshot(r0, 0x0, 0x2d) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x70, 0x0, &(0x7f0000000180)=[@increfs_done={0x40106308, 0x1}, @decrefs={0x40046307, 0x3}, @enter_looper, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x2, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/32, 0x20, 0x2, 0x35}}, &(0x7f0000000140)={0x0, 0x18, 0x38}}, 0x400}, @register_looper], 0x4b, 0x0, &(0x7f0000000200)="4b0b65346f54c7279649e139fdb7cb1abc62371439e61baceb2fd9f7aecd2b014ff01b3e4635010d06fd5291a5cdbde0bfedfea75c4cfef076a08756249e4c1f7e105cba5ccc9687dc0f2e"}) 14:20:29 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0xff}, &(0x7f0000000040)=0xc) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) 14:20:29 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x2, 0x30}, 0xc) 14:20:29 executing program 4: msgget(0x1, 0x0) r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x200, 0x0) read$snapshot(r1, 0x0, 0x0) 14:20:29 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080075000800ffdbdf41dd5b466cb659250f000000000008000b0002000000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x8840) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000ffdbdf250300000008000b000900000008003900ff0100000500370000000000050035000100000005002a00010000000800390001f0ffff050038000000000008003200ff00000005002f000000000005002f0000000000056c7101a506140417725cf45a5cc4a9cccf96890370881165fa8b36e0f76d25fcb0ef2e27d4e5f8b6c14482569ee7f62270348c73fd97e8e6faafd3cce72b73d3e74e0ef8000a38eb1741670a87ff0b2805ea"], 0x64}, 0x1, 0x0, 0x0, 0x48044}, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000004c0)=@assoc_value, &(0x7f0000000500)=0x8) 14:20:29 executing program 5: getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f00000000c0)=""/198, &(0x7f0000000000)=0xc6) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:29 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) read$snapshot(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x1, 0x0) write$snapshot(r2, &(0x7f0000000040)="523785583f06e76e5b166631954af5e7ee797f9c5c1a12d291243f8ddb5e816a32c3bf8fd832a8", 0x27) 14:20:29 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0xb44e538db6ea5932, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000)=0x40, 0x4) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0x7b, "5916325d494a3472f661c5d5f174618d95d70f5c9e763b37dadae8bba5a7df58804a43dd696dbb8fb3f03f125bb8b82aac552f6724bdad05e0fb013c86c7091f0daac508da7287bad2b37f3b96a6f7656ef60a0b048afb1277acb2594addf589df487274abd73e07153d5d1ff5ca194ad987cddad1e3558e66e44e"}, &(0x7f0000000040)=0x83) read$snapshot(r0, 0x0, 0x0) 14:20:29 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0xff}, &(0x7f0000000040)=0xc) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) 14:20:29 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000004c0)=@assoc_value, &(0x7f0000000500)=0x8) 14:20:29 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0, 0x24538000}, 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x101200, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x10000, 0x0) read$snapshot(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000040)) 14:20:29 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f00000000c0)) read$snapshot(r0, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r3, 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r3, 0x400c330d, &(0x7f0000000040)={0x10001, 0x1}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r4, 0x0, 0x0) ioctl$SNAPSHOT_FREE(r4, 0x3305) 14:20:29 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:29 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000004c0)=@assoc_value, &(0x7f0000000500)=0x8) 14:20:29 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0xb44e538db6ea5932, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000)=0x40, 0x4) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0x7b, "5916325d494a3472f661c5d5f174618d95d70f5c9e763b37dadae8bba5a7df58804a43dd696dbb8fb3f03f125bb8b82aac552f6724bdad05e0fb013c86c7091f0daac508da7287bad2b37f3b96a6f7656ef60a0b048afb1277acb2594addf589df487274abd73e07153d5d1ff5ca194ad987cddad1e3558e66e44e"}, &(0x7f0000000040)=0x83) read$snapshot(r0, 0x0, 0x0) 14:20:29 executing program 4: socket$caif_stream(0x25, 0x1, 0x3) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) bind$isdn(r1, &(0x7f0000000000)={0x22, 0x3, 0x1, 0x0, 0x8a}, 0x6) 14:20:29 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:29 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000040)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x501000, 0x0) read$snapshot(r0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) 14:20:29 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="1a010000", @ANYRES16=r1, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x14000090) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r3, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x22000040}, 0x20044041) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="10002bbd7000fedbdf25090000000500070005000000080001000000000008000300", @ANYRES32=r4, @ANYBLOB="060003700551ae7f5202618259dc7b672b73c7e2dc7a5689ecbb39c4582ba2ba745f007f31f6497cfeff15a8cb1ad8b561f43ec03a532f9f0d82ac047568d72e2b631eb3bccfadb6c1fb85c2858ef1da237f16d9646fcceae854330438fc2f437c07f0286fb280ede18f5ebc3a04870dc8a416435921c5255d63571d1a9673fa4a60ff21bc61bf4962bcc5ba"], 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r5, 0x0, 0x0) 14:20:29 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000004c0)=@assoc_value, &(0x7f0000000500)=0x8) 14:20:29 executing program 1: read$snapshot(0xffffffffffffffff, 0x0, 0x56) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80040, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x100000001) 14:20:29 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 14:20:29 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={r2, 0xb3ba}, 0xc) read$snapshot(r0, 0x0, 0x0) 14:20:29 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x3, 0xfffff5cd, 0x20, 0x0, 0x11}) read$snapshot(r0, 0x0, 0x0) 14:20:29 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0xcf88c2, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x5) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000)=0x10000, 0x4) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) read$snapshot(r1, &(0x7f00000000c0)=""/132, 0x84) read$snapshot(r0, 0x0, 0x0) 14:20:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, &(0x7f0000000500)) 14:20:29 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:29 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x800, @private1={0xfc, 0x1, [], 0x1}, 0x6}], 0x1c) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) 14:20:29 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) write$cgroup_freezer_state(r0, &(0x7f0000000040)='THAWED\x00', 0x7) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000000)) 14:20:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) 14:20:29 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) 14:20:29 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 14:20:29 executing program 5: setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0, 0x7}, 0x8) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f00000000c0)) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000000)={0x3f, 0x8001}) 14:20:29 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001180)={0x74, 0x0, &(0x7f0000000100)=[@acquire_done, @increfs_done={0x40106308, 0x2}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)=ANY=[@ANYBLOB="852a62770b08fe7e3851000300"/32, @ANYRES32=r0, @ANYBLOB="006e2ae07e00000000000000000000000000006c27268ba3e1ea347d79e12e2b05a2da33"], &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x1000, 0x0, &(0x7f0000000180)="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"}) 14:20:29 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x3, 0xfffff5cd, 0x20, 0x0, 0x11}) read$snapshot(r0, 0x0, 0x0) 14:20:30 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) 14:20:30 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x1, 0x3, 0xd7}}) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) read$snapshot(r0, 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000040)={0xfffffffffffff801, 0xfffffffc}) 14:20:30 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="85100000fbffffff0d1b820000000000182b0000", @ANYRES32=r0, @ANYBLOB="060000000000000000ee6c49c333d66443d214d40911acfc2aa83b8e1e2bc986849935651d6346772baad93194befcb881205acfb5bb50fae16083b81e52d531d462452e75e6d034863325150d295def6331e0b9d003ca46c4e4feb33a6005fb8698d925f7fa135167e66f8182904c0a3b1ae79e019af99f58bde37105"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0xf9, &(0x7f00000000c0)=""/249, 0x41000, 0x14, [], r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x5, 0xff, 0x1}, 0x10, 0x21631, r2}, 0x78) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r4, 0x0, 0x0) write$UHID_INPUT(r3, &(0x7f0000000480)={0x8, {"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", 0x1000}}, 0x1006) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={0x0, 0x7fff}, &(0x7f0000000340)=0x8) read$snapshot(r3, 0x0, 0x0) 14:20:30 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x8000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000280)={{0x3, 0x0, 0x200, 0x1, 0x9}, 0x0, 0x2, 'id1\x00', 'timer0\x00', 0x0, 0x3, 0x9, 0x4, 0x10000}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @private=0xa010102}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x1, 0x0, @mcast2, 0x80000001}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @rand_addr=0x64010102}, @in6={0xa, 0x4e22, 0x5, @remote, 0x5}, @in={0x2, 0x4e23, @broadcast}], 0x98) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000480), &(0x7f00000004c0)=0x4) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000500)={0x1, 0x101, 0x3, 0x0, 0xc}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000040)={0x7, [0x7, 0xb5, 0x3, 0x2, 0x2, 0x81, 0x101]}, 0x12) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}]}, &(0x7f0000000180)='GPL\x00', 0xffffffff, 0xf9, &(0x7f0000000580)=""/249, 0x40f00, 0x10, [], r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x5, 0x615, 0x5}, 0x10}, 0x78) 14:20:30 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:30 executing program 2: read$snapshot(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000000)) 14:20:30 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) 14:20:30 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:30 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00'}) read$snapshot(r0, 0x0, 0x0) 14:20:30 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x100) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000080)={{0xffffffffffffffff, 0x1, 0x4, 0x1, 0x2e4e5296}, 0x6, 0x8}) 14:20:30 executing program 3: sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x88, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan1\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, [], 0x2b}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x1) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 14:20:30 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$snapshot(r2, &(0x7f0000000200)="d6922a01f1ba1d829404b142525cbbd7f9a09fff5f119c317d58cdb3016542039373a57af84d2a36c2fdd26fa90738", 0x2f) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0xb0, "f57049a7f9885dc49d1e09686a29f8037d005cc7bcce26f330948c917e4f7a989168ac61bc33709a3d790f67b463ec095e8a09852ccdac358f919a71cd6c427d95eb18222cfd4920ca259417889b6977939955e1cc2a0e88dfbfd502b5a930b1a209c0939f96eee666f8fdf52d1f090eaacec970c6c032507217df70b0e40cd1e6e7204147d8d38ef1a473cc39bb65e2f0744d99194f582f37dc70fa53b81e741baf877403e5d6f8e8cf59a5ddfc7259"}, &(0x7f0000000000)=0xb8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r3, 0x1}, &(0x7f0000000180)=0x8) 14:20:30 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = socket(0x6, 0x800, 0xce) ioctl$IMCLEAR_L2(r2, 0x80044946, &(0x7f00000000c0)=0x401) write$UHID_INPUT(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 14:20:30 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x3) ioctl$SNAPSHOT_FREE(r0, 0x3305) r2 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=0xffffffffffffffff, 0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001440)={0xc0, 0x0, &(0x7f0000001300)=[@dead_binder_done, @decrefs, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000015c0)={@fda={0x66646185, 0x3, 0x0, 0x26}, @ptr={0x70742a85, 0x1, &(0x7f00000014c0)=""/226, 0xe2, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/29, 0x1d, 0x2, 0x1f}}, &(0x7f00000001c0)={0x0, 0x20, 0x48}}, 0x400}, @increfs={0x40046304, 0x1}, @decrefs={0x40046307, 0x2}, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001240)={@fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r4}, @fda={0x66646185, 0x5, 0x0, 0x10}}, &(0x7f00000012c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x71, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47168fa877b8e97432342adeb305740b9999309107354606b486434ff09289722928124efeaa17aee61fbd2acb9530303e4b35016cacb9aa3e"}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r5, 0x330f, 0xfffffffffffffc00) connect$caif(r1, &(0x7f0000000000), 0x18) 14:20:30 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000000)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3305) 14:20:30 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 14:20:30 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000040)={0x5, 0x4}) 14:20:30 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00'}) read$snapshot(r0, 0x0, 0x0) 14:20:30 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x3) ioctl$SNAPSHOT_FREE(r0, 0x3305) r2 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=0xffffffffffffffff, 0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001440)={0xc0, 0x0, &(0x7f0000001300)=[@dead_binder_done, @decrefs, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000015c0)={@fda={0x66646185, 0x3, 0x0, 0x26}, @ptr={0x70742a85, 0x1, &(0x7f00000014c0)=""/226, 0xe2, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/29, 0x1d, 0x2, 0x1f}}, &(0x7f00000001c0)={0x0, 0x20, 0x48}}, 0x400}, @increfs={0x40046304, 0x1}, @decrefs={0x40046307, 0x2}, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001240)={@fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r4}, @fda={0x66646185, 0x5, 0x0, 0x10}}, &(0x7f00000012c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x71, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47168fa877b8e97432342adeb305740b9999309107354606b486434ff09289722928124efeaa17aee61fbd2acb9530303e4b35016cacb9aa3e"}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r5, 0x330f, 0xfffffffffffffc00) connect$caif(r1, &(0x7f0000000000), 0x18) 14:20:30 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = socket(0x2c, 0x6, 0x8001) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000100)=0x8) r2 = socket(0x8, 0x80000, 0x7) getpeername$l2tp6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x20) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000140)=0xffffffff, 0x4) 14:20:30 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00', r0) 14:20:30 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040), &(0x7f00000000c0)=0x8) 14:20:30 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x3) ioctl$SNAPSHOT_FREE(r0, 0x3305) r2 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=0xffffffffffffffff, 0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001440)={0xc0, 0x0, &(0x7f0000001300)=[@dead_binder_done, @decrefs, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000015c0)={@fda={0x66646185, 0x3, 0x0, 0x26}, @ptr={0x70742a85, 0x1, &(0x7f00000014c0)=""/226, 0xe2, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/29, 0x1d, 0x2, 0x1f}}, &(0x7f00000001c0)={0x0, 0x20, 0x48}}, 0x400}, @increfs={0x40046304, 0x1}, @decrefs={0x40046307, 0x2}, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001240)={@fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r4}, @fda={0x66646185, 0x5, 0x0, 0x10}}, &(0x7f00000012c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x71, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47168fa877b8e97432342adeb305740b9999309107354606b486434ff09289722928124efeaa17aee61fbd2acb9530303e4b35016cacb9aa3e"}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r5, 0x330f, 0xfffffffffffffc00) connect$caif(r1, &(0x7f0000000000), 0x18) 14:20:30 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) 14:20:30 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000000)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3305) 14:20:30 executing program 5: getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001100)={0x0, 0x9e, "62a5af8ef6008f04e2a4cf36e33eab51f1402cc5407b0876094195723010cee5fa2c12e7659cdefa8fb9f64c237370659c0317c07fa2a87f86ed1a3bff8eec10093b88805f8f5fb44b2a638c8c5f52e9523de694eacef2413f96dba91c02d081988062f0b38e1faf203b700695f9bf57cf5d360ff8168e3906719fb3a57139bcecccdb8cb0f44cf021868be9c5418bdc917810925c1168b043c2f3a71e36"}, &(0x7f00000011c0)=0xfffffffffffffd18) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r0, 0x1}, 0x8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f00000000c0)={0x8, {"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", 0x1000}}, 0x1006) read$snapshot(r1, 0x0, 0x0) 14:20:30 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:30 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x3) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=0xffffffffffffffff, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001440)={0xc0, 0x0, &(0x7f0000001300)=[@dead_binder_done, @decrefs, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000015c0)={@fda={0x66646185, 0x3, 0x0, 0x26}, @ptr={0x70742a85, 0x1, &(0x7f00000014c0)=""/226, 0xe2, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/29, 0x1d, 0x2, 0x1f}}, &(0x7f00000001c0)={0x0, 0x20, 0x48}}, 0x400}, @increfs={0x40046304, 0x1}, @decrefs={0x40046307, 0x2}, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001240)={@fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x5, 0x0, 0x10}}, &(0x7f00000012c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x71, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47168fa877b8e97432342adeb305740b9999309107354606b486434ff09289722928124efeaa17aee61fbd2acb9530303e4b35016cacb9aa3e"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r4, 0x330f, 0xfffffffffffffc00) 14:20:30 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:30 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0xc0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x0, 0x2, 0x7ff, 0x0, 0xf}) read$snapshot(r0, 0x0, 0x0) 14:20:30 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:30 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:30 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x3) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=0xffffffffffffffff, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001440)={0xc0, 0x0, &(0x7f0000001300)=[@dead_binder_done, @decrefs, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000015c0)={@fda={0x66646185, 0x3, 0x0, 0x26}, @ptr={0x70742a85, 0x1, &(0x7f00000014c0)=""/226, 0xe2, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/29, 0x1d, 0x2, 0x1f}}, &(0x7f00000001c0)={0x0, 0x20, 0x48}}, 0x400}, @increfs={0x40046304, 0x1}, @decrefs={0x40046307, 0x2}, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001240)={@fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x5, 0x0, 0x10}}, &(0x7f00000012c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x71, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47168fa877b8e97432342adeb305740b9999309107354606b486434ff09289722928124efeaa17aee61fbd2acb9530303e4b35016cacb9aa3e"}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 14:20:30 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:30 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000)='NLBL_UNLBL\x00', r0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) 14:20:30 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:30 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f00000000c0)={0xa, {0x1, 0x2, 0x6}}, 0xa) write$UHID_INPUT2(r0, &(0x7f0000000100)={0xc, {0x1a, "943d08c190d45f2a651df3a7557cb0f003e567d0a1833a22ef56"}}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) 14:20:30 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) prctl$PR_GET_THP_DISABLE(0x2a) 14:20:30 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x3) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=0xffffffffffffffff, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001440)={0xc0, 0x0, &(0x7f0000001300)=[@dead_binder_done, @decrefs, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000015c0)={@fda={0x66646185, 0x3, 0x0, 0x26}, @ptr={0x70742a85, 0x1, &(0x7f00000014c0)=""/226, 0xe2, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/29, 0x1d, 0x2, 0x1f}}, &(0x7f00000001c0)={0x0, 0x20, 0x48}}, 0x400}, @increfs={0x40046304, 0x1}, @decrefs={0x40046307, 0x2}, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001240)={@fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x5, 0x0, 0x10}}, &(0x7f00000012c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x71, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47168fa877b8e97432342adeb305740b9999309107354606b486434ff09289722928124efeaa17aee61fbd2acb9530303e4b35016cacb9aa3e"}) 14:20:30 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r4, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0x6, &(0x7f00000000c0)=@raw=[@ldst={0x1, 0x3, 0x1, 0x5, 0x9, 0xffffffffffffffc0, 0x4}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x1}, @map_val={0x18, 0x4, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xffffffff}, @jmp={0x5, 0x1, 0x7, 0x6, 0x8, 0x18, 0xfffffffffffffffc}], &(0x7f0000000100)='GPL\x00', 0x73a2acd9, 0x3b, &(0x7f0000000140)=""/59, 0x40f00, 0x8, [], r3, 0x1c, r4, 0x8, &(0x7f00000001c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xd, 0x1, 0x3a9}, 0x10, 0x1f253}, 0x78) write$UHID_INPUT(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f00000002c0)={0x0, 0xec, "38aa8237d4aac630fa4a9a57e9c2315893b0a64077cfcd301cdf44d442d4e986cfee9caf7185a0814ce6923441147366676a6187357351c07e1c1ed469dc596bd5d153aa167c5f76852507b6adcae50c02eb6ebcda45b8082568fb66a0d4f2cf07a12d6fea24e1b9c41c2042b560def3ea00b44018435521330d765a87d105dd33d89f094086037d0ed934488a51e3b2f784def7a9e9039e65ed61817c651581279afbcc0236cdf9cb7033057834d2968c23a4e90d3a53f604bbce220417ca0a4f6dab78ac6fb381752ec84aadf0baa4c2cd309742ebcf6592080b8ecb1dd59dfe45799b3c3d0aeab0b73202"}, &(0x7f00000003c0)=0xf4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000480)={r5, 0x8a, "270f2f05185420b7e290d3b6d92d64f3584fdb5de8f3f8001b3aed5affcbfc5660959fa06c1c23763ea4fbecb7be726a92b96d60b4319f59fbb3c341b6e3e823ad1d006c77824dadc3f84664cc0d03133df29c5c033bdf853b1032e7c0a4e6f1c342ed98d44402f229a13cc8c9a7a47bf43b2d751838b025389c417623859816b840ebd3678df6ed288d"}, &(0x7f0000000400)=0x92) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000540), &(0x7f0000000580)=0x4) write$UHID_INPUT2(r1, &(0x7f0000000000)={0xc, {0x14, "830a9d6817673c6b73ad658fd85af71d7c906171"}}, 0x1a) 14:20:30 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x88, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x9, 0x1, 0x23}, @flat=@handle={0x73682a85, 0x1, 0x3}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000000000008561646600000000000000000000000001000000000000000600000000000000852a6277010000000200"/68], &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x43, 0x0, &(0x7f0000000180)="4f50ad5ef30f6d6301b2176789ee2287a55887b36a3398173b9ccbf8becfadc904404b1e6d9a732aa5eeba92a16d6be027405c9ef4ca5161eac8035d126ed41dfd0b48"}) read$snapshot(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e21, 0x0, @mcast1, 0xfffff001}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e21, @multicast1}], 0x6c) 14:20:30 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:30 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000000)={0x4007, 0x0, 0x80000000, 0x4}) r1 = socket$isdn(0x22, 0x3, 0x0) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x4) read$snapshot(r0, 0x0, 0x0) 14:20:30 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x3) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001440)={0xc0, 0x0, &(0x7f0000001300)=[@dead_binder_done, @decrefs, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000015c0)={@fda={0x66646185, 0x3, 0x0, 0x26}, @ptr={0x70742a85, 0x1, &(0x7f00000014c0)=""/226, 0xe2, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/29, 0x1d, 0x2, 0x1f}}, &(0x7f00000001c0)={0x0, 0x20, 0x48}}, 0x400}, @increfs={0x40046304, 0x1}, @decrefs={0x40046307, 0x2}, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001240)={@fd={0x66642a85, 0x0, r2}, @fd, @fda={0x66646185, 0x5, 0x0, 0x10}}, &(0x7f00000012c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x71, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47168fa877b8e97432342adeb305740b9999309107354606b486434ff09289722928124efeaa17aee61fbd2acb9530303e4b35016cacb9aa3e"}) 14:20:30 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x8) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={0x0, 0xfffffffe, 0x3945387fa7832241}, 0xc) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x6080c0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) read$snapshot(r0, 0x0, 0x0) 14:20:30 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x4, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r1, 0x4) 14:20:30 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046306, 0x1}, @decrefs={0x40046307, 0x1}, @enter_looper, @acquire={0x40046305, 0x3}], 0xdd, 0x0, &(0x7f0000000100)="045583a666a08117ba8b89a118c1f12f25c2b09971485f55e65805632e1ab4fa0c9c6e7cd68b2b803c5f6406031f64813c641ee2a2474e3675487e0b1dab7aa3e9252252c4bcc8df13bcd75dd428358d1d0e8ca9f8d523669837932f13577d8c53f1d039eff012516fc0b94ac386c5547951cbe276270243aea2c19f450c87e86aa71a1fc185d16eadb7c35ef60e1f48185c731fbbcbedb5b83c96a219f3dfaf25b1383c083bd26e53da9f3c156aa5c897fd5790bde1ede89a8d481ba80664c0ec999dc76cb033e8ad5092a7d35be37c9c39069e44680cb64190ef93a0"}) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) write$UHID_INPUT(r1, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', r1) 14:20:30 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = socket(0x18, 0x6, 0x7) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000)=0x3, 0x4) 14:20:30 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000000c0)={0x3, [0x7, 0x3f, 0x4801]}, 0xa) 14:20:30 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x3) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001440)={0xc0, 0x0, &(0x7f0000001300)=[@dead_binder_done, @decrefs, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000015c0)={@fda={0x66646185, 0x3, 0x0, 0x26}, @ptr={0x70742a85, 0x1, &(0x7f00000014c0)=""/226, 0xe2, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/29, 0x1d, 0x2, 0x1f}}, &(0x7f00000001c0)={0x0, 0x20, 0x48}}, 0x400}, @increfs={0x40046304, 0x1}, @decrefs={0x40046307, 0x2}, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001240)={@fd={0x66642a85, 0x0, r2}, @fd, @fda={0x66646185, 0x5, 0x0, 0x10}}, &(0x7f00000012c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x71, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47168fa877b8e97432342adeb305740b9999309107354606b486434ff09289722928124efeaa17aee61fbd2acb9530303e4b35016cacb9aa3e"}) 14:20:31 executing program 2: sched_getaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x6f}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048011}, 0x40050) 14:20:31 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000000c0)={0x3, [0x7, 0x3f, 0x4801]}, 0xa) 14:20:31 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="0a000f8d8601b66d0700ff267f00920000026f0204000180"], 0x18) read$snapshot(r0, 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000000c0)={0xe, {0x6, 0x80, 0x29, 0x1a, "fc6d0ed675a7d72a6659e78dd98687cd8bb5f3ac2dd2a21c2de0"}}, 0x26) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) 14:20:31 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x8) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000140)=""/81, &(0x7f0000000100)=0x51) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 14:20:31 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x3) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001440)={0xc0, 0x0, &(0x7f0000001300)=[@dead_binder_done, @decrefs, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000015c0)={@fda={0x66646185, 0x3, 0x0, 0x26}, @ptr={0x70742a85, 0x1, &(0x7f00000014c0)=""/226, 0xe2, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/29, 0x1d, 0x2, 0x1f}}, &(0x7f00000001c0)={0x0, 0x20, 0x48}}, 0x400}, @increfs={0x40046304, 0x1}, @decrefs={0x40046307, 0x2}, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001240)={@fd={0x66642a85, 0x0, r2}, @fd, @fda={0x66646185, 0x5, 0x0, 0x10}}, &(0x7f00000012c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x71, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47168fa877b8e97432342adeb305740b9999309107354606b486434ff09289722928124efeaa17aee61fbd2acb9530303e4b35016cacb9aa3e"}) 14:20:31 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) socket$isdn(0x22, 0x3, 0x21) r1 = socket$isdn(0x22, 0x3, 0x24) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000040)=0x4) read$snapshot(r0, 0x0, 0x0) 14:20:31 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 14:20:31 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x3) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001440)={0xc0, 0x0, &(0x7f0000001300)=[@dead_binder_done, @decrefs, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000015c0)={@fda={0x66646185, 0x3, 0x0, 0x26}, @ptr={0x70742a85, 0x1, &(0x7f00000014c0)=""/226, 0xe2, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/29, 0x1d, 0x2, 0x1f}}, &(0x7f00000001c0)={0x0, 0x20, 0x48}}, 0x400}, @increfs={0x40046304, 0x1}, @decrefs={0x40046307, 0x2}, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001240)={@fd, @fd, @fda={0x66646185, 0x5, 0x0, 0x10}}, &(0x7f00000012c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x71, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47168fa877b8e97432342adeb305740b9999309107354606b486434ff09289722928124efeaa17aee61fbd2acb9530303e4b35016cacb9aa3e"}) 14:20:31 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2b0000066473202b7279202b6d656d6f72792004e5e0939c9773c038f2dfffffffffffffff000000000000000000"], 0x24) read$snapshot(r0, 0x0, 0x0) 14:20:31 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x3) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001440)={0xc0, 0x0, &(0x7f0000001300)=[@dead_binder_done, @decrefs, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000015c0)={@fda={0x66646185, 0x3, 0x0, 0x26}, @ptr={0x70742a85, 0x1, &(0x7f00000014c0)=""/226, 0xe2, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/29, 0x1d, 0x2, 0x1f}}, &(0x7f00000001c0)={0x0, 0x20, 0x48}}, 0x400}, @increfs={0x40046304, 0x1}, @decrefs={0x40046307, 0x2}, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001240)={@fd={0x66642a85, 0x0, r2}, @fd, @fda={0x66646185, 0x5, 0x0, 0x10}}, &(0x7f00000012c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x71, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47168fa877b8e97432342adeb305740b9999309107354606b486434ff09289722928124efeaa17aee61fbd2acb9530303e4b35016cacb9aa3e"}) 14:20:31 executing program 3: r0 = socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x1000, "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"}, &(0x7f0000000000)=0x1008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000001100)={r1, @in6={{0xa, 0x4e23, 0x36c, @loopback, 0x20}}, 0x81, 0x8000}, 0x90) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r2, 0x0, 0x0) 14:20:31 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010101}}}, 0x84) 14:20:31 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x3) ioctl$SNAPSHOT_FREE(r0, 0x3305) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001440)={0xc0, 0x0, &(0x7f0000001300)=[@dead_binder_done, @decrefs, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000015c0)={@fda={0x66646185, 0x3, 0x0, 0x26}, @ptr={0x70742a85, 0x1, &(0x7f00000014c0)=""/226, 0xe2, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/29, 0x1d, 0x2, 0x1f}}, &(0x7f00000001c0)={0x0, 0x20, 0x48}}, 0x400}, @increfs={0x40046304, 0x1}, @decrefs={0x40046307, 0x2}, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001240)={@fd, @fd, @fda={0x66646185, 0x5, 0x0, 0x10}}, &(0x7f00000012c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x71, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47168fa877b8e97432342adeb305740b9999309107354606b486434ff09289722928124efeaa17aee61fbd2acb9530303e4b35016cacb9aa3e"}) 14:20:31 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "eee2e7723e2735d77056d34534d6d2ea660b2fa5293fe8a2176999ab6c6d4807"}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x1f}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) 14:20:31 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x98}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x24040811) 14:20:31 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) read$snapshot(r1, &(0x7f00000000c0)=""/4096, 0x1000) 14:20:31 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x3) ioctl$SNAPSHOT_FREE(r0, 0x3305) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001440)={0xc0, 0x0, &(0x7f0000001300)=[@dead_binder_done, @decrefs, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000015c0)={@fda={0x66646185, 0x3, 0x0, 0x26}, @ptr={0x70742a85, 0x1, &(0x7f00000014c0)=""/226, 0xe2, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/29, 0x1d, 0x2, 0x1f}}, &(0x7f00000001c0)={0x0, 0x20, 0x48}}, 0x400}, @increfs={0x40046304, 0x1}, @decrefs={0x40046307, 0x2}, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001240)={@fd, @fd, @fda={0x66646185, 0x5, 0x0, 0x10}}, &(0x7f00000012c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x71, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47168fa877b8e97432342adeb305740b9999309107354606b486434ff09289722928124efeaa17aee61fbd2acb9530303e4b35016cacb9aa3e"}) 14:20:31 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000), &(0x7f0000000040)=0x8) read$snapshot(r0, 0x0, 0x0) 14:20:31 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "eee2e7723e2735d77056d34534d6d2ea660b2fa5293fe8a2176999ab6c6d4807"}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x1f}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) 14:20:31 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x5}, 0x8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6017fe5b66a9ad7e21d8df060000", @ANYRES16=0x0, @ANYBLOB="bff93f8e7000ffdbdff32a0000000a0300001087fd8d7c7fc8dceb08002b001f000004050037000100290cab0a2a239acbf0000006002a00d19dae155e0400000008000b1704000000942cf50300"/93], 0x60}}, 0x10010) read$snapshot(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4e}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000240)={0x0, 0x4, 0x45, 0x2, 0x5, 0x80, 0x1, 0xc4, 0x6, 0x80, 0x20, 0x3, 0x5, 0x1}, 0xe) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f00000000c0)) 14:20:31 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@int=0x2, 0x4) 14:20:31 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x3) ioctl$SNAPSHOT_FREE(r0, 0x3305) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001440)={0xc0, 0x0, &(0x7f0000001300)=[@dead_binder_done, @decrefs, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000015c0)={@fda={0x66646185, 0x3, 0x0, 0x26}, @ptr={0x70742a85, 0x1, &(0x7f00000014c0)=""/226, 0xe2, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/29, 0x1d, 0x2, 0x1f}}, &(0x7f00000001c0)={0x0, 0x20, 0x48}}, 0x400}, @increfs={0x40046304, 0x1}, @decrefs={0x40046307, 0x2}, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001240)={@fd, @fd, @fda={0x66646185, 0x5, 0x0, 0x10}}, &(0x7f00000012c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x71, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47168fa877b8e97432342adeb305740b9999309107354606b486434ff09289722928124efeaa17aee61fbd2acb9530303e4b35016cacb9aa3e"}) 14:20:31 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) read$snapshot(r2, &(0x7f00000000c0)=""/234, 0xea) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x1) 14:20:31 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "eee2e7723e2735d77056d34534d6d2ea660b2fa5293fe8a2176999ab6c6d4807"}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x1f}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) 14:20:31 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x1011}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffe}], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x40000a, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0x8c, 0xffff}, 0x10}, 0x78) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0xa, 0xffff, 0x8, 0x10001, 0x62, r0, 0x1, [], 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x40) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0x49, "0f62b08b0cd9083a379f10cc95509feccc46db724e59ea5648301c993e1f08002cc4ae81c54bb6a1dba0aa707317bfc1e764d3de10d87dd6935831723a2b4dcf398f0d5d012312f855"}, &(0x7f00000000c0)=0x51) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r2, 0x7}, &(0x7f0000000140)=0x8) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000340)={r3, @in={{0x2, 0x4e22, @loopback}}, 0x7fff, 0x6}, &(0x7f0000000400)=0x90) 14:20:31 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000000)={{0x3, 0x1, 0x5, 0x0, 0x7fffffff}, 0x1}) 14:20:31 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x3) r1 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001440)={0xc0, 0x0, &(0x7f0000001300)=[@dead_binder_done, @decrefs, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000015c0)={@fda={0x66646185, 0x3, 0x0, 0x26}, @ptr={0x70742a85, 0x1, &(0x7f00000014c0)=""/226, 0xe2, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/29, 0x1d, 0x2, 0x1f}}, &(0x7f00000001c0)={0x0, 0x20, 0x48}}, 0x400}, @increfs={0x40046304, 0x1}, @decrefs={0x40046307, 0x2}, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001240)={@fd, @fd, @fda={0x66646185, 0x5, 0x0, 0x10}}, &(0x7f00000012c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x71, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47168fa877b8e97432342adeb305740b9999309107354606b486434ff09289722928124efeaa17aee61fbd2acb9530303e4b35016cacb9aa3e"}) [ 551.298880] sctp: [Deprecated]: syz-executor.3 (pid 14010) Use of int in max_burst socket option deprecated. [ 551.298880] Use struct sctp_assoc_value instead 14:20:31 executing program 4: getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000010c0)={0x0, @in6={{0xa, 0x4e24, 0x3, @private2, 0x2}}}, &(0x7f0000001180)=0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x32) socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x31, 0xd, &(0x7f00000011c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, [@btf_id={0x18, 0xf6ccb496ba865c4, 0x3, 0x0, 0x2}, @map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4c}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map={0x18, 0x1, 0x1, 0x0, r0}, @jmp={0x5, 0x0, 0x9, 0x6, 0x3, 0xffffffffffffffc0}, @alu={0x7, 0x1, 0x0, 0xb, 0x2, 0xfffffffffffffff8, 0x10}]}, &(0x7f0000001240)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0xc, [], 0x0, 0x0, r0, 0x8, &(0x7f0000001280)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000012c0)={0x3, 0x10, 0x80, 0x40}, 0x10}, 0x78) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) write$UHID_INPUT(r1, &(0x7f0000000080)={0x8, {"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", 0x1000}}, 0x1006) [ 551.337790] sctp: [Deprecated]: syz-executor.2 (pid 14016) Use of struct sctp_assoc_value in delayed_ack socket option. [ 551.337790] Use struct sctp_sack_info instead 14:20:31 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "eee2e7723e2735d77056d34534d6d2ea660b2fa5293fe8a2176999ab6c6d4807"}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x1f}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) 14:20:31 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:31 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f00000000c0)={0xe, {0x7, 0x0, 0x2, 0x92, "bc522c0f1ad23d8521baa6f328fa42a610a8b609f4eb91df377e14ebe921f8c249ab479fddfba6d5638c7c13c75ee1397748bcbd9c3eed8fe82b37fbbbb257b3062c24cb64ee72e5613dd7584a5bf542ba25c27120b56f6355c24d1141c328d19e7690e56a532dc51487bfb4477f5067c67aca9d56e5c6a4dd78aa3afb150dbdc57f5a903c4bb006688af43029c0880f62b5"}}, 0x9e) read$snapshot(r0, 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) 14:20:31 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001440)={0xc0, 0x0, &(0x7f0000001300)=[@dead_binder_done, @decrefs, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000015c0)={@fda={0x66646185, 0x3, 0x0, 0x26}, @ptr={0x70742a85, 0x1, &(0x7f00000014c0)=""/226, 0xe2, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/29, 0x1d, 0x2, 0x1f}}, &(0x7f00000001c0)={0x0, 0x20, 0x48}}, 0x400}, @increfs={0x40046304, 0x1}, @decrefs={0x40046307, 0x2}, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001240)={@fd, @fd, @fda={0x66646185, 0x5, 0x0, 0x10}}, &(0x7f00000012c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x71, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47168fa877b8e97432342adeb305740b9999309107354606b486434ff09289722928124efeaa17aee61fbd2acb9530303e4b35016cacb9aa3e"}) 14:20:31 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x7ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00', r0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x3e143) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x0, 0x10000}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r2, 0x0, 0x0) [ 551.445470] sctp: [Deprecated]: syz-executor.2 (pid 14025) Use of struct sctp_assoc_value in delayed_ack socket option. [ 551.445470] Use struct sctp_sack_info instead 14:20:31 executing program 4: read$snapshot(0xffffffffffffffff, 0x0, 0xfffffffffffffd24) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) 14:20:31 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0xc0, 0x0, &(0x7f0000001300)=[@dead_binder_done, @decrefs, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000015c0)={@fda={0x66646185, 0x3, 0x0, 0x26}, @ptr={0x70742a85, 0x1, &(0x7f00000014c0)=""/226, 0xe2, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/29, 0x1d, 0x2, 0x1f}}, &(0x7f00000001c0)={0x0, 0x20, 0x48}}, 0x400}, @increfs={0x40046304, 0x1}, @decrefs={0x40046307, 0x2}, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001240)={@fd, @fd, @fda={0x66646185, 0x5, 0x0, 0x10}}, &(0x7f00000012c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x71, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47168fa877b8e97432342adeb305740b9999309107354606b486434ff09289722928124efeaa17aee61fbd2acb9530303e4b35016cacb9aa3e"}) 14:20:31 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0xfd54) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) read$snapshot(r0, 0x0, 0x2b) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x10802, 0x0) socket$l2tp(0x2, 0x2, 0x73) ioctl$SNAPSHOT_FREE(r3, 0x3305) 14:20:31 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "eee2e7723e2735d77056d34534d6d2ea660b2fa5293fe8a2176999ab6c6d4807"}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x1f}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 14:20:31 executing program 3: getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0xfd9d}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x4c, 0x5, 0x3ba, 0x42e2bed, r0}, &(0x7f0000000140)=0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x402302, 0x0) read$snapshot(r1, 0x0, 0x0) 14:20:31 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x64, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xed}]}, 0x64}, 0x1, 0x0, 0x0, 0x8081}, 0x20040804) read$snapshot(r0, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000180), 0x4) 14:20:31 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000000)={0x0, 0x26452b48, 0x800, 0x8}) 14:20:31 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0xc0, 0x0, &(0x7f0000001300)=[@dead_binder_done, @decrefs, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000015c0)={@fda={0x66646185, 0x3, 0x0, 0x26}, @ptr={0x70742a85, 0x1, &(0x7f00000014c0)=""/226, 0xe2, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/29, 0x1d, 0x2, 0x1f}}, &(0x7f00000001c0)={0x0, 0x20, 0x48}}, 0x400}, @increfs={0x40046304, 0x1}, @decrefs={0x40046307, 0x2}, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001240)={@fd, @fd, @fda={0x66646185, 0x5, 0x0, 0x10}}, &(0x7f00000012c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x71, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47168fa877b8e97432342adeb305740b9999309107354606b486434ff09289722928124efeaa17aee61fbd2acb9530303e4b35016cacb9aa3e"}) 14:20:31 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "eee2e7723e2735d77056d34534d6d2ea660b2fa5293fe8a2176999ab6c6d4807"}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x1f}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) 14:20:31 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x7ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00', r0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x3e143) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x0, 0x10000}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r2, 0x0, 0x0) 14:20:31 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) read$snapshot(r0, 0x0, 0x0) 14:20:31 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0xc0, 0x0, &(0x7f0000001300)=[@dead_binder_done, @decrefs, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000015c0)={@fda={0x66646185, 0x3, 0x0, 0x26}, @ptr={0x70742a85, 0x1, &(0x7f00000014c0)=""/226, 0xe2, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/29, 0x1d, 0x2, 0x1f}}, &(0x7f00000001c0)={0x0, 0x20, 0x48}}, 0x400}, @increfs={0x40046304, 0x1}, @decrefs={0x40046307, 0x2}, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001240)={@fd, @fd, @fda={0x66646185, 0x5, 0x0, 0x10}}, &(0x7f00000012c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x71, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47168fa877b8e97432342adeb305740b9999309107354606b486434ff09289722928124efeaa17aee61fbd2acb9530303e4b35016cacb9aa3e"}) 14:20:31 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000000)=0x5) 14:20:31 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000000)=0x91a) 14:20:31 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "eee2e7723e2735d77056d34534d6d2ea660b2fa5293fe8a2176999ab6c6d4807"}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x1f}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) 14:20:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "eee2e7723e2735d77056d34534d6d2ea660b2fa5293fe8a2176999ab6c6d4807"}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x1f}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) 14:20:31 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0xc0, 0x0, &(0x7f0000001300)=[@dead_binder_done, @decrefs, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000015c0)={@fda={0x66646185, 0x3, 0x0, 0x26}, @ptr={0x70742a85, 0x1, &(0x7f00000014c0)=""/226, 0xe2, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/29, 0x1d, 0x2, 0x1f}}, &(0x7f00000001c0)={0x0, 0x20, 0x48}}, 0x400}, @increfs={0x40046304, 0x1}, @decrefs={0x40046307, 0x2}, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001240)={@fd, @fd, @fda={0x66646185, 0x5, 0x0, 0x10}}, &(0x7f00000012c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x71, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47168fa877b8e97432342adeb305740b9999309107354606b486434ff09289722928124efeaa17aee61fbd2acb9530303e4b35016cacb9aa3e"}) 14:20:31 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x72803) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0xa80, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0x0, 0x7}) 14:20:31 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) read$snapshot(r1, &(0x7f00000000c0)=""/4096, 0x1000) 14:20:31 executing program 2: r0 = socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x1000, "2ff8982bdd6eb208a5d6b7c0bd62c7c7d791182cafebe040562236092f3682d14a7726c1d4cf16933dbb5fcd42611153f269c3fa188ea332c6f15a6ad9b8a2b94898db64565d191cbbe9a321a9ea5f327765ef382fb4839dc06cf502a45bef80041a0e1d88646d5e9cad6f1dd02639f05f8408492813fc7422e7bf3e9b09e605e8c75f936fe113ea4ab37f3cbce0c9a36d2a21a3f96296966d4be50450da6c7e508ef29ce5dbf023c77b85c716396cd83e01cac2b47397e567f7839d47ca2468dadf3e5d022f3ded401c70f46ead6c2ec667eab4acd60aebe26f91028f2bb99979419d785c3fbb91fd5b0e2d1ebdc3fcd6e70c36b144e6c3feb142e80a8a60fa4dee8bd41b9794ee852f4afc43e17eaad2a3233e1a9700547611b7df001901bc9129f303f4b349f2ae2b3f3314784516594b946e7337848e50bc76d5f60636119af5d6e2fb742cb7c7620731b4ec52a0869d42625cd658ef38a912d5b476da444f7ad00fe69b976238c5cd6cd70ff18cf47cafb8cf0579ac7581c646d5e36853278bc4e1d374a8676b175e218658d3f54d85a2366cb272c681d90be49b7cc6d653975b147cd98eaa0a81cc53969379db6e62e4d171794bb9c19947ef161dbbaff93ec0adf2aeb89a250700c4ac5292459b2931ce6c09d0b0c60e3eb226db1298ae8e82ff3ee95366e386761102000d9b4c14bc03a8004239052115a1ddfbbc6cca7f50fe5605dfe549f94287ff6196287a96bb5560f19b341996bcafbd827649e3973d09c00549d335ce24e1eb1b5451021c58da17fb12dfbd8bf84e981d3fbfbe8f4bc1edac47134a936f798386218c843374a37e2b2aae37bf659d91f12482991ec91fd10fdffec5f069cf387b3db2d568a680fbc6dbed846ecefda359e03c031b3d8487e598b667d54e08a8e7375bbdeb85dc6f77a66e59c58238da29111b8e28e9f99385ce2daf25fab5cffaaf3d3b42cf8ac900774e16008370af86137ef67c7f6c35ded8e86731b61815500e1a330188e8c0ee22da81e4469bcd93577b0dfabda1af7ff41b63464afb93ef7e80c3d0317b62d480c1b2c88bc7ec6e7e5d2a3fb1a2de992409b58be82cda4ad4fb6e94410472edea46dccc97895124ca7008b9f3be859edfdb51898a2b5c2ab13cb1cd4ce9e0cbf12b42c6d1b40ca4b5ce93a094b519d28d103bcbb8170b5b1a15a6cac5fc06d36f45c58d7c7903e3816e7b0f088f3b121ab0dd82bba87e109bf626bc5ce3b7d163560f7ccf6ae83938cedbc86c9b3444b98918c4a1e375e86f3a889889b0bb0c74e973deaa450fdef8d15093cd81519c2e6ed060f736252cca97b9d08b45d0ec7507d7c2faaf2ba93ffeb80c52b6256062af13e46d5b7fa11208faa6354f72ae8b4d692d778cfb7da335a6f7e25c5c69568ef1e006cdf3a188a400b0312953224676f46f2ae67859c5d2181ee4ae55f07f8b427e1c215a664aedc00e10231c2a53e5a3fc7afe4a95f9cd3a2e4233b32a88104edd9144dce46a659a39875fc8554ea5ea903cb0076fc35fca33cd8ad33432d4b2b9d8d4b4194001e350a43cb65b0b9231506c9612c8c8e494f7c91c02e5b9b93f07147bdb990cfb0437656881d64734469a31792af45a7e8e63c61de900a59924335dba853d8b3bea34a383964623771511123a00b4a82ec9d359775c0320be7de2582dcc306b7c04c5364cad7b4a662d35fd892749af63b682f05c54afeb3bf74091332a685b14675e8d4d7d014de71de2e110b460dd1523372abd350a65f322b836207332d960202cd452d303d8b0547419e0f705bd16cde9a9c5af2250f59bef25f9e027970115e8a9adaecc3f958cc5efcba76ee4416a3f7a4602f412ba165914904f58b02dcec2170322d5040af495795ed7335f786058db37dfbd71b2eb348bcfa086ef8630fcaf2f5f54f5e49d3d81c54333776a4095f283d6da65c11d197c47e1e6c33679d5fc3b0aec2c9586d69165a0a60a14b5f8f6ea0660b198bdd0c68ea3dc310b4cda4ca7e9da2ce75ff5e86a5f3a0c1fdb7fe9bc5523575e42ce281e961aca4ff98fcf5f4acc48e54bf95c5b114d9ee68c0c55715ec72b28e8e8de7c99c340d5201366a72eb805fab7c6aa7a6c633737ddd3f9c191378b65abbfc557f9249a66adade8e6c9a9f4d8d2cdfd45fe6c042af4eead25ee0171a9104bab3e0dc19d76e7582f79b2242a27b8969e50a31f26500d689ece0e117b5379f9216e6cb976dfe79f8fedf58d417be78ee6100df28e5625b11e746c7864f6ebfb626d0060d85f2892812e5925336622161b0329665907a514aa0420dedf3863b95edb2b8e20377851b80ead29bf08bd9818c7dddbb3fe65bb09af6593fd7a73171a6d490a0ca44e3c58be3f55059b29fa81cefd663cfb3e1a651fdc1bafdea138ca9c84a03cef6f80bc9f1761b689afaf653ae65eff5e46c2abd145038687ec5f7537f41e49a31ef175d648a5fb72c31a620870f342ce38e63150a7d3512a2e158130b8f89e226b81569008b5aea077bef9c60ca1536339072445e9e96871ba2afbc9766ae908ef2b3a5ba139679fdf0ed4d388bc2553f8d8b483299d60216849c9c9b9fe348dae9ab51bcf5bf899355b09d6ce4acf9a16115cc4f85a8064341eae5943e753af82f903f1774428b86a04db5a72bd77a549d1583151a91bce55470ffc2bc1676fef4ec259d15f746bfd5284054a10cf8a77f397ba02bfe3d661d228671f8d0881c07cbe2b85699ef210ec76f1a0a9836dfc2973377cb108f1d0b4ca2154eded6cf8ee4ac474d1004c1b22fd0dcffb0a7d84610392797d22d4a22cf64620aa95783443fdb6be71990c5e7ec515deff32fe9b14db7c36f93db9438aa805e5a1ff8fa9858e1a2ad3bbb1201680e06bc41879a1543dacb45f14f16f9fdc8fe1d6f04cf209676f1231ceb36b17850c1715517515449c9922cd625087bd8a6e96c89145675f80e23c2f9817e813c4352cf1361260a85b47525bc1a359fab202fa69b07d47fff8266eec3352313264adc64711479e301ff1f3e9ed39031543e81b10345efd784b0a567bd1d364f498b21b511174d78d1dd06b4db2ee641fc1f0bfc0efb62a06e18c47443bcb6548e3365aade42e33def02ba4e95f89ed725976517909abff7e58cd5daf172a07ebb8f487aef59280a3f26ba35309630579fe299bf03383ce3d70b0bb3985e06dbbf3d321d4a8fa343df26249bbec0c2378eb0f20eaa3813bf4d31bd23c9567b4c458a66c219d3da90ea56a36dab25ce9eab30480a7b487fa5df4550e6be8c3a0d4d9c3eee034370f9edbac7398b9bb13e04e7a2a61b86f668a1ae43e1e3f256ae9c6fb61d997ca2c98af28b68d59c72d6a437c2eca13a193b73964fd00fb386253c1bea44dcde9856b44e110d65eee7c2cfcda17af500072d98bc12b5b88cc48d8e9cca540632d37b2fc75a8b69d391d2dbe51b150dec00f8ca9ed2c63e6e8496ef5903b8f5a06c887cbd9e7c8a870ea14a2261dad5d672836d0686fcda1ca8ec8cccc34c81e527d57afaa76797e6d7216e7e4b6ef1de4e143fdc4ca17bf07b6897f48396a7aaa7765f773709f10e7b3952312612a566977f26978cce8aefcf9996a8cb8a458a0abaf2c4fccda2d661b7ee5ad935a8d962bf4d3193c3626cd7ee7f782008b2439e9fdef6ed231408bf0971afa6e8359697a0c559a1e0ca41739d8f62d795d605484410750de7cd882b013efab9d6068404fbab2dafc713e7adeae4aae414644b4f6d163eec411f16bd83ee3a295959abff3ecdb5613de89c905023913f0692465440f72ae8e8dab108ad2467f953786cb8cb89538a440ce864ce163ea42e7633f696bd4fb48ee0740e3fc71eff9eb0ca205c0ad39c51a1bd9a24ec1686e2ef5fb984728c4525d07a5e0d2b1e8dc68271bcac9620525474ce2620ac90335c763f472fe1368117d052427777a3f082821a5b058f23fb7ac6b752f96cb7dc046588948681d0e612b719b6e5210bb05c14f571f047d89fee4053452d4736d5c88ed0d391e5f766d469a2c477c109272330ff3765aaeaba75711ad47e36b3cce177e8da76d6f9f550a19c89025e717181dde9b48575dd98c74e38c4609b95ccc3b9e124ef425e9b4aecd286491b3cb56f6ce3e12ea267259add5923fb102d183cacca95ece994eefcc9a9caa547c6474a8d88af05ef4b0cccdb316fa50cea8582c01b2633be04bc5fe08fbf0905e92b55688f7f6a3cfd1fc43276993a4bb153dc6d5910e4aa2bd0f240998069e29d917be2e68d42308531fdb2a4f7ec99e562940955fcec63e0abbc3816a10205c7a54148873811ceb40cbf7654f931c08b5ce632eea2c7b32d9085f1c5589d1bde92b1dad80bf19d18ddb03f500633b1e44842314ccafceaef4027d52774b3ab8295c796dce5136e22a8e2c4e51b6c6c449fdeddd87596ecd1e4bb73ec4426af6cd662480f58010e53b8704061261fab1a0bb70be8a4b74a729b4badaff0b2cb64db659d1ca06220d611fdb7b4c0f5b14b3577b2fb73c0158f9a39938c52a5aac7055dc3347b6b368b75b93e4d475a182f6c1d4fd5cccf7afd32ca44f632ae9fb6b09c06c516d1615dcbd0478e6aa3a3ea0d8f90b7fc85a9194e2eeafffa8764650aad886c87ee9a1b59c98ee0f9a3fb119423b23737746d297e1cbebb422c448338eaf0b211763fee34b8a49cd4c740b9f62b853f2de5517332ed337484b040b01a1da0634aadab4f7f42339bea44b392b17211945c8e8dd23ebe2a8d6d21523fbadac3fde9511d4d43c4f60b581153deef1c06ee0cd649ef3a8945175c93105cd711e928ee04bad84cbb72d6e5b0ee8b613beadc85e9d1f4767f89f756571b6b7620bc8dd8ec8fea60ebaef2cd47e9a12d6a3670ae966987ba7ba07c3c820ee87e7676ea512eaad0051b44780a995967b87d36adab42552bec2755b75f95db99a14a07045b429d13c470f31966ce345c7a6a8d3bb4592ffca8b8b2cdd775d069596a7381d69efcceb41b881eeb1aa48c91a7781e596173790823735996317a326c21bc613d26cf69e6494e2e504f06da1608f626e5df7afc4e15386395daa07c0f5ebaf4a95ae261377553dcbed061a49c8766c147e4c98c41cfebc3f5ccd2450e94689ed69d13cfdff1531279f716c4d3b420b0da5d41c9097bdb970d5de8f92027a34effcb8a56aeb0ee3e491d1e6d431a008bf0a1225b5e4e70db63f18f714d4c13f6de12f2bfa4a5cf903b084b63bda76d877ac3cbd002361313a668ca8f78c4472b841cb9127a7f50bbd898d69ec74c5eec813df09f9b8907989eb9f62fd9f08c9eaeb9a60d9c2c888bd6fabfe740ad22abcba5b5385f6220f3cc32331fc217772dadd53f31fa507d73c398b115e10c55f741fc2e96f857a7eab495d1a9da64ebe3799fecf9323670bab3ae50e65fbbf78920b813f2343b4f70ccf005c7762cce0d08573d46cc95a3930749c4adfb9006a78a4274209022655e5413356c5214f3eeafe1f02355d0a0d567e0ee7678c0dba01343b681dc8ebca53ebe7a5fafc46642371a3b7671ae08a05e5e07df24a566c124414ecd33d23572fe89dd388ae37d4b39abf0a1ad91da6b10179430f36ee060856bf5316ddf332cb18d47f63e71a556e898011f9508316b34fa47b99b7fa253f1ddfbf39bbf96ad4ee8f5adb0a0754ce14c163d4b0e5fed498d35676bc4dd028880be1c7d2613ded2f26626080d2afb985b9016140e64fe3bb5e36089f88825c4076ce9bdaaccaa05c2712f9c57f6b715eccc23a24ccfa2741e0d8a271102972"}, &(0x7f0000000000)=0x1008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000001100)={r1, @in6={{0xa, 0x4e23, 0x36c, @loopback, 0x20}}, 0x81, 0x8000}, 0x90) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r2, 0x0, 0x0) 14:20:31 executing program 1: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "eee2e7723e2735d77056d34534d6d2ea660b2fa5293fe8a2176999ab6c6d4807"}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x1f}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) 14:20:32 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @remote}}}, &(0x7f0000000000)=0x84) 14:20:32 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0xc0, 0x0, &(0x7f0000001300)=[@dead_binder_done, @decrefs, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000015c0)={@fda={0x66646185, 0x3, 0x0, 0x26}, @ptr={0x70742a85, 0x1, &(0x7f00000014c0)=""/226, 0xe2, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/29, 0x1d, 0x2, 0x1f}}, &(0x7f00000001c0)={0x0, 0x20, 0x48}}, 0x400}, @increfs={0x40046304, 0x1}, @decrefs={0x40046307, 0x2}, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001240)={@fd, @fd, @fda={0x66646185, 0x5, 0x0, 0x10}}, &(0x7f00000012c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x71, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47168fa877b8e97432342adeb305740b9999309107354606b486434ff09289722928124efeaa17aee61fbd2acb9530303e4b35016cacb9aa3e"}) 14:20:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "eee2e7723e2735d77056d34534d6d2ea660b2fa5293fe8a2176999ab6c6d4807"}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x1f}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) 14:20:32 executing program 1: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "eee2e7723e2735d77056d34534d6d2ea660b2fa5293fe8a2176999ab6c6d4807"}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x1f}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) [ 551.871578] Restarting kernel threads ... done. 14:20:32 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0xc8000, 0x0) read$snapshot(r1, 0x0, 0xffee) 14:20:32 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0xc0, 0x0, &(0x7f0000001300)=[@dead_binder_done, @decrefs, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000015c0)={@fda={0x66646185, 0x3, 0x0, 0x26}, @ptr={0x70742a85, 0x1, &(0x7f00000014c0)=""/226, 0xe2, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/29, 0x1d, 0x2, 0x1f}}, &(0x7f00000001c0)={0x0, 0x20, 0x48}}, 0x400}, @increfs={0x40046304, 0x1}, @decrefs={0x40046307, 0x2}, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001240)={@fd, @fd, @fda={0x66646185, 0x5, 0x0, 0x10}}, &(0x7f00000012c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x71, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47168fa877b8e97432342adeb305740b9999309107354606b486434ff09289722928124efeaa17aee61fbd2acb9530303e4b35016cacb9aa3e"}) 14:20:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "eee2e7723e2735d77056d34534d6d2ea660b2fa5293fe8a2176999ab6c6d4807"}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x1f}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) [ 551.927200] Restarting kernel threads ... done. 14:20:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "eee2e7723e2735d77056d34534d6d2ea660b2fa5293fe8a2176999ab6c6d4807"}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x1f}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) 14:20:32 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040), &(0x7f00000000c0)=0x8) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) getpeername$l2tp6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x20) read$snapshot(r0, 0x0, 0x0) 14:20:32 executing program 1: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "eee2e7723e2735d77056d34534d6d2ea660b2fa5293fe8a2176999ab6c6d4807"}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x1f}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) 14:20:32 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0xc0, 0x0, &(0x7f0000001300)=[@dead_binder_done, @decrefs, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000015c0)={@fda={0x66646185, 0x3, 0x0, 0x26}, @ptr={0x70742a85, 0x1, &(0x7f00000014c0)=""/226, 0xe2, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/29, 0x1d, 0x2, 0x1f}}, &(0x7f00000001c0)={0x0, 0x20, 0x48}}, 0x400}, @increfs={0x40046304, 0x1}, @decrefs={0x40046307, 0x2}, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001240)={@fd, @fd, @fda={0x66646185, 0x5, 0x0, 0x10}}, &(0x7f00000012c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x71, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47168fa877b8e97432342adeb305740b9999309107354606b486434ff09289722928124efeaa17aee61fbd2acb9530303e4b35016cacb9aa3e"}) 14:20:32 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) read$snapshot(r0, &(0x7f00000000c0)=""/59, 0x3b) 14:20:32 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "eee2e7723e2735d77056d34534d6d2ea660b2fa5293fe8a2176999ab6c6d4807"}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x1f}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) 14:20:32 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) write$cgroup_freezer_state(r0, &(0x7f0000000240)='THAWED\x00', 0x7) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @private=0xa010101}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e22, 0x67, @mcast2, 0x6}, @in6={0xa, 0x4e21, 0xfffff801, @empty, 0x1}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e23, @multicast1}], 0x88) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x8001}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000001c0)={r3, 0x7c8b8000}, &(0x7f0000000200)=0x8) 14:20:32 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0xc0, 0x0, &(0x7f0000001300)=[@dead_binder_done, @decrefs, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000015c0)={@fda={0x66646185, 0x3, 0x0, 0x26}, @ptr={0x70742a85, 0x1, &(0x7f00000014c0)=""/226, 0xe2, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/29, 0x1d, 0x2, 0x1f}}, &(0x7f00000001c0)={0x0, 0x20, 0x48}}, 0x400}, @increfs={0x40046304, 0x1}, @decrefs={0x40046307, 0x2}, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001240)={@fd, @fd, @fda={0x66646185, 0x5, 0x0, 0x10}}, &(0x7f00000012c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x71, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47168fa877b8e97432342adeb305740b9999309107354606b486434ff09289722928124efeaa17aee61fbd2acb9530303e4b35016cacb9aa3e"}) 14:20:32 executing program 2: read$snapshot(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x200000, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000040)={{0x1, 0x3, 0x2ff3bf2, 0x0, 0x9}, 0x0, 0x4}) write$snapshot(r1, &(0x7f0000000100)="a3d45202739a4cfef56a965475584969e9d706d81085533c01e88c2fcd30d35ad6018246a638db6b25a6db6e4e53f3de7f20573945f97d4d9ea3822703808f1eebc73a93163973b9a823380c1b96e2f9bbc118b43301dbac4c61cd097d3bedde07d1e9d1a3250d84606e8f15d91f38c8096feb9bd6b88c85ef68b8bebe5f738900"/146, 0x92) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000001c0)={{0x3, 0x2, 0x80, 0x1, 0x2}}) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f00000000c0)) 14:20:32 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x438600, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x0, 0x3, 0x2, 0x2, 0x100}}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000001c0)=0x9, 0x4) write$UHID_INPUT(r1, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r3, 0x400c330d, &(0x7f0000000140)={0x2, 0x737}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r4, 0x0, 0x0) read$snapshot(r4, &(0x7f0000000200)=""/240, 0xf0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x10002, 0x0) read$snapshot(r5, 0x0, 0x0) 14:20:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "eee2e7723e2735d77056d34534d6d2ea660b2fa5293fe8a2176999ab6c6d4807"}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x1f}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) 14:20:32 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "eee2e7723e2735d77056d34534d6d2ea660b2fa5293fe8a2176999ab6c6d4807"}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x1f}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) 14:20:32 executing program 0: syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001440)={0xc0, 0x0, &(0x7f0000001300)=[@dead_binder_done, @decrefs, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000015c0)={@fda={0x66646185, 0x3, 0x0, 0x26}, @ptr={0x70742a85, 0x1, &(0x7f00000014c0)=""/226, 0xe2, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/29, 0x1d, 0x2, 0x1f}}, &(0x7f00000001c0)={0x0, 0x20, 0x48}}, 0x400}, @increfs={0x40046304, 0x1}, @decrefs={0x40046307, 0x2}, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001240)={@fd, @fd, @fda={0x66646185, 0x5, 0x0, 0x10}}, &(0x7f00000012c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x71, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47168fa877b8e97432342adeb305740b9999309107354606b486434ff09289722928124efeaa17aee61fbd2acb9530303e4b35016cacb9aa3e"}) 14:20:32 executing program 4: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "eee2e7723e2735d77056d34534d6d2ea660b2fa5293fe8a2176999ab6c6d4807"}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x1f}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) 14:20:32 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040), &(0x7f00000000c0)=0x8) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) getpeername$l2tp6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x20) read$snapshot(r0, 0x0, 0x0) 14:20:32 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) read$snapshot(r1, 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x242000, 0x0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000140)={0xe, {0x3, 0x7b, 0x98, 0x1b, "44bb71f01315091d911cba0e5898178f5b0fb79466afc4ab9ae928"}}, 0x27) ioctl$SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304) 14:20:32 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000000)) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000000c0)=0x10000, 0x4) 14:20:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000680)={0x70, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x70}, 0x1, 0x0, 0x0, 0x14}, 0x4000001) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1040400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYRES64=r2, @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c00060001000000010000000c0006000300000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x8100}, 0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r9, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r10, 0x1}, 0x14}}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x6c, r10, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x620}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000818) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r11, 0x0, 0x0) 14:20:32 executing program 4: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "eee2e7723e2735d77056d34534d6d2ea660b2fa5293fe8a2176999ab6c6d4807"}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x1f}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) 14:20:32 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "eee2e7723e2735d77056d34534d6d2ea660b2fa5293fe8a2176999ab6c6d4807"}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x1f}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) 14:20:32 executing program 0: syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001440)={0xc0, 0x0, &(0x7f0000001300)=[@dead_binder_done, @decrefs, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000015c0)={@fda={0x66646185, 0x3, 0x0, 0x26}, @ptr={0x70742a85, 0x1, &(0x7f00000014c0)=""/226, 0xe2, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/29, 0x1d, 0x2, 0x1f}}, &(0x7f00000001c0)={0x0, 0x20, 0x48}}, 0x400}, @increfs={0x40046304, 0x1}, @decrefs={0x40046307, 0x2}, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001240)={@fd, @fd, @fda={0x66646185, 0x5, 0x0, 0x10}}, &(0x7f00000012c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x71, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47168fa877b8e97432342adeb305740b9999309107354606b486434ff09289722928124efeaa17aee61fbd2acb9530303e4b35016cacb9aa3e"}) 14:20:32 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:32 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000180)=""/97, &(0x7f0000000140)=0x61) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x48000) read$snapshot(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0xfea0, @mcast1, 0xec}, @in={0x2, 0x4e21, @rand_addr=0x64010102}], 0x2c) 14:20:32 executing program 4: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "eee2e7723e2735d77056d34534d6d2ea660b2fa5293fe8a2176999ab6c6d4807"}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x1f}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) 14:20:32 executing program 0: syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001440)={0xc0, 0x0, &(0x7f0000001300)=[@dead_binder_done, @decrefs, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000015c0)={@fda={0x66646185, 0x3, 0x0, 0x26}, @ptr={0x70742a85, 0x1, &(0x7f00000014c0)=""/226, 0xe2, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/29, 0x1d, 0x2, 0x1f}}, &(0x7f00000001c0)={0x0, 0x20, 0x48}}, 0x400}, @increfs={0x40046304, 0x1}, @decrefs={0x40046307, 0x2}, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001240)={@fd, @fd, @fda={0x66646185, 0x5, 0x0, 0x10}}, &(0x7f00000012c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x71, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47168fa877b8e97432342adeb305740b9999309107354606b486434ff09289722928124efeaa17aee61fbd2acb9530303e4b35016cacb9aa3e"}) 14:20:32 executing program 2: syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001440)={0xc0, 0x0, &(0x7f0000001300)=[@dead_binder_done, @decrefs, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000015c0)={@fda={0x66646185, 0x3, 0x0, 0x26}, @ptr={0x70742a85, 0x1, &(0x7f00000014c0)=""/226, 0xe2, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/29, 0x1d, 0x2, 0x1f}}, &(0x7f00000001c0)={0x0, 0x20, 0x48}}, 0x400}, @increfs={0x40046304, 0x1}, @decrefs={0x40046307, 0x2}, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001240)={@fd, @fd, @fda={0x66646185, 0x5, 0x0, 0x10}}, &(0x7f00000012c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x71, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47168fa877b8e97432342adeb305740b9999309107354606b486434ff09289722928124efeaa17aee61fbd2acb9530303e4b35016cacb9aa3e"}) 14:20:32 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, 0x0, 0x20000004) 14:20:32 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "eee2e7723e2735d77056d34534d6d2ea660b2fa5293fe8a2176999ab6c6d4807"}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x1f}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) 14:20:32 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, 0x0, 0x20000004) 14:20:32 executing program 3: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00020cbd7000fcdbdf250100080005002200000000000c001600014000000000000056cc644a87245ab9817711dc31d3d81362a95b53317bbcfec434dc8ad1ae8f55ad684e98d1a1b295b3eb3fe8551d4ed44c4d998b2b77508de140870f8046bf803e3bb15dff51ed48c2897421c944c6211e7db1f9397ed2f19f62b5129d38ca33"], 0x28}, 0x1, 0x0, 0x0, 0x4004004}, 0x1000) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000000c0)={0x1, 0x2, 0xdd8, 0x0, 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000000)) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) 14:20:32 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 14:20:32 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000)=0x400, 0x4) read$snapshot(r0, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 14:20:32 executing program 2: syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200)='NLBL_UNLBL\x00', 0xffffffffffffffff) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00', r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="020025bd7000ffdbdf25010000000500140081000000050022000100000014001f8f9e76ba62021aab00000000000000000114002000fc0200000000000000000000000000010600020092f50000"], 0x54}, 0x1, 0x0, 0x0, 0x4c880}, 0x8000) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x200) 14:20:32 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "eee2e7723e2735d77056d34534d6d2ea660b2fa5293fe8a2176999ab6c6d4807"}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x1f}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) 14:20:32 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, 0x0, 0x20000004) 14:20:32 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) write$snapshot(r0, &(0x7f00000000c0)="3c805bc223b56ce8e9c63961198f4f1370e4d5babc4669f03a540f18a82fdbe3562c1218cf90b8bc885852f178cc45ec7ebac8ecd01ae1646d61a44ea4a62c35581618641788a8d0fdf2a6885d87ca8ce0c2ff6ed5dfec8d0eee34395669ea14a2dec4359b85a483ccaa47f44dfa9551b99c6af4d09cdbff70852cf9bc6ef1399df1022056b513185ab0f0839992", 0x8e) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x9dee) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x8200, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000180)) 14:20:32 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000080)=0x8) [ 552.537364] binder: 14197:14204 ioctl c0306201 0 returned -14 14:20:32 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 14:20:32 executing program 5: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00020cbd7000fcdbdf250100080005002200000000000c001600014000000000000056cc644a87245ab9817711dc31d3d81362a95b53317bbcfec434dc8ad1ae8f55ad684e98d1a1b295b3eb3fe8551d4ed44c4d998b2b77508de140870f8046bf803e3bb15dff51ed48c2897421c944c6211e7db1f9397ed2f19f62b5129d38ca33"], 0x28}, 0x1, 0x0, 0x0, 0x4004004}, 0x1000) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000000c0)={0x1, 0x2, 0xdd8, 0x0, 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000000)) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) 14:20:32 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "eee2e7723e2735d77056d34534d6d2ea660b2fa5293fe8a2176999ab6c6d4807"}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x1f}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) 14:20:32 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) 14:20:32 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, 0x0, 0x20000004) 14:20:32 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000080)=""/160) 14:20:32 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x109003, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000040)={0x6, 0x4}) 14:20:32 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 552.668249] binder: 14213:14218 ioctl c0306201 0 returned -14 14:20:32 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) 14:20:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, 0x0, 0x20000004) 14:20:32 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x109003, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000040)={0x6, 0x4}) 14:20:32 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000f0000000c000600000000000000000005000f000000000008000300", @ANYRES32=r5, @ANYBLOB="ba4289b8b33c3ab7515a48c08c81008ecb31d3f9821c9077ebdbc0eae46f0158e132e18256e1d665"], 0x30}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r1, 0x300, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000}, 0x40000) 14:20:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) 14:20:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, 0x0, 0x20000004) 14:20:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, 0x0, 0x20000004) [ 552.830999] binder: 14229:14236 ioctl c0306201 0 returned -14 14:20:33 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x71, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47168fa877b8e97432342adeb305740b9999309107354606b486434ff09289722928124efeaa17aee61fbd2acb9530303e4b35016cacb9aa3e"}) 14:20:33 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-neonbs\x00'}, 0x58) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x6, &(0x7f0000000200)=@raw=[@btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9f1}], &(0x7f0000000240)='GPL\x00', 0x5, 0x7b, &(0x7f0000000280)=""/123, 0x40f00, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xf, 0x2, 0x4}, 0x10}, 0x78) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001480)=@bpf_ext={0x1c, 0x2, &(0x7f00000000c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x12}], &(0x7f0000000100)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000480)=""/4096, 0x41000, 0x1, [], r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x7, 0xa65, 0xfff}, 0x10, 0x15a11, r3}, 0x78) read$snapshot(r0, 0x0, 0x0) 14:20:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) 14:20:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, 0x0, 0x20000004) 14:20:33 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x391842, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:33 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x71, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47168fa877b8e97432342adeb305740b9999309107354606b486434ff09289722928124efeaa17aee61fbd2acb9530303e4b35016cacb9aa3e"}) 14:20:33 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000f0000000c000600000000000000000005000f000000000008000300", @ANYRES32=r5, @ANYBLOB="ba4289b8b33c3ab7515a48c08c81008ecb31d3f9821c9077ebdbc0eae46f0158e132e18256e1d665"], 0x30}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r1, 0x300, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000}, 0x40000) 14:20:33 executing program 2: r0 = gettid() syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) r1 = getpgrp(0x0) rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000140)) rt_tgsigqueueinfo(r0, 0x0, 0x39, &(0x7f0000000080)={0x2a, 0x9, 0x1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r2, 0x0, 0x0) 14:20:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) 14:20:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x20000004) 14:20:33 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x71, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47168fa877b8e97432342adeb305740b9999309107354606b486434ff09289722928124efeaa17aee61fbd2acb9530303e4b35016cacb9aa3e"}) 14:20:33 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:33 executing program 2: r0 = gettid() syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) r1 = getpgrp(0x0) rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000140)) rt_tgsigqueueinfo(r0, 0x0, 0x39, &(0x7f0000000080)={0x2a, 0x9, 0x1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r2, 0x0, 0x0) 14:20:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:20:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) 14:20:33 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0xba, "cb029eb3882eb452ff1eebcda3ca30ae9766084422d6d6740f5e0c321a007a1b2b78b86a0398167efe3dbf686a7f64542d0346e909bf85f136c92ca1bc955564cb38190a7a3579f3c96c9e582cf5fc5dee6582823cce6b4b3ad945882dc8fd351111282b9b0d06c6d7e7d6744560875c57de2fd2b1761dcb05cf08715ec0774f5960b7f44bdeafe20399dd66964c68eecc1643531c6d444d44b0dab6b6ae0dea2884f3dfc2577ebb21aba1605271cfb7376ae6a0a94d2666c4da"}, &(0x7f0000000040)=0xc2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000)={r1, 0x80000000}, &(0x7f00000001c0)=0x8) read$snapshot(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000240)={0xa5, 0x9, 0x7, 0x20, 0x1, 0x3, 0x6, 0x0, 0xb9, 0xf5, 0x2, 0x1f, 0x0, 0x1}, 0x41) 14:20:33 executing program 2: r0 = gettid() syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) r1 = getpgrp(0x0) rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000140)) rt_tgsigqueueinfo(r0, 0x0, 0x39, &(0x7f0000000080)={0x2a, 0x9, 0x1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r2, 0x0, 0x0) 14:20:33 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x74, 0x0, &(0x7f0000001300)=[@dead_binder_done, @decrefs, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000015c0)={@fda={0x66646185, 0x3, 0x0, 0x26}, @ptr={0x70742a85, 0x1, &(0x7f00000014c0)=""/226, 0xe2, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/29, 0x1d, 0x2, 0x1f}}, &(0x7f00000001c0)={0x0, 0x20, 0x48}}, 0x400}, @increfs={0x40046304, 0x1}, @decrefs={0x40046307, 0x2}, @exit_looper], 0x71, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47168fa877b8e97432342adeb305740b9999309107354606b486434ff09289722928124efeaa17aee61fbd2acb9530303e4b35016cacb9aa3e"}) 14:20:33 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x8, 0x7, 0x8, 0x80, 0x2, 0x9, 0x1f, 0x4, 0x1, 0x73, 0x7f, 0x8, 0x1e, 0x7f}, 0xe) ioctl$SNAPSHOT_FREE(r2, 0x3305) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(gcm-aes-ce)\x00'}, 0x58) 14:20:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) 14:20:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x9c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x64, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f2404d2b4e2b0582c2b96e984e623c2007af2eab8ce5021565f642aa21a65e5b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b273ea80785e14a639526a6bdd4ef32264fcbbb019b6c5f78bb4d2ff1f2a1bee"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x32}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x9c}}, 0x20004804) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x30, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:33 executing program 2: r0 = gettid() syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) r1 = getpgrp(0x0) rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000140)) rt_tgsigqueueinfo(r0, 0x0, 0x39, &(0x7f0000000080)={0x2a, 0x9, 0x1}) read$snapshot(0xffffffffffffffff, 0x0, 0x0) 14:20:33 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0xba, "cb029eb3882eb452ff1eebcda3ca30ae9766084422d6d6740f5e0c321a007a1b2b78b86a0398167efe3dbf686a7f64542d0346e909bf85f136c92ca1bc955564cb38190a7a3579f3c96c9e582cf5fc5dee6582823cce6b4b3ad945882dc8fd351111282b9b0d06c6d7e7d6744560875c57de2fd2b1761dcb05cf08715ec0774f5960b7f44bdeafe20399dd66964c68eecc1643531c6d444d44b0dab6b6ae0dea2884f3dfc2577ebb21aba1605271cfb7376ae6a0a94d2666c4da"}, &(0x7f0000000040)=0xc2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000)={r1, 0x80000000}, &(0x7f00000001c0)=0x8) read$snapshot(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000240)={0xa5, 0x9, 0x7, 0x20, 0x1, 0x3, 0x6, 0x0, 0xb9, 0xf5, 0x2, 0x1f, 0x0, 0x1}, 0x41) 14:20:33 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x70, 0x0, &(0x7f0000001300)=[@dead_binder_done, @decrefs, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000015c0)={@fda={0x66646185, 0x3, 0x0, 0x26}, @ptr={0x70742a85, 0x1, &(0x7f00000014c0)=""/226, 0xe2, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/29, 0x1d, 0x2, 0x1f}}, &(0x7f00000001c0)={0x0, 0x20, 0x48}}, 0x400}, @increfs={0x40046304, 0x1}, @decrefs={0x40046307, 0x2}], 0x71, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47168fa877b8e97432342adeb305740b9999309107354606b486434ff09289722928124efeaa17aee61fbd2acb9530303e4b35016cacb9aa3e"}) 14:20:33 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x9c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x64, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f2404d2b4e2b0582c2b96e984e623c2007af2eab8ce5021565f642aa21a65e5b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b273ea80785e14a639526a6bdd4ef32264fcbbb019b6c5f78bb4d2ff1f2a1bee"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x32}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x9c}}, 0x20004804) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x30, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) 14:20:33 executing program 2: r0 = gettid() syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) r1 = getpgrp(0x0) rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000140)) rt_tgsigqueueinfo(r0, 0x0, 0x39, &(0x7f0000000080)={0x2a, 0x9, 0x1}) read$snapshot(0xffffffffffffffff, 0x0, 0x0) 14:20:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x9c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x64, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f2404d2b4e2b0582c2b96e984e623c2007af2eab8ce5021565f642aa21a65e5b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b273ea80785e14a639526a6bdd4ef32264fcbbb019b6c5f78bb4d2ff1f2a1bee"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x32}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x9c}}, 0x20004804) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x30, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x9c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x64, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f2404d2b4e2b0582c2b96e984e623c2007af2eab8ce5021565f642aa21a65e5b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b273ea80785e14a639526a6bdd4ef32264fcbbb019b6c5f78bb4d2ff1f2a1bee"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x32}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x9c}}, 0x20004804) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x30, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:33 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x68, 0x0, &(0x7f0000001300)=[@dead_binder_done, @decrefs, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000015c0)={@fda={0x66646185, 0x3, 0x0, 0x26}, @ptr={0x70742a85, 0x1, &(0x7f00000014c0)=""/226, 0xe2, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/29, 0x1d, 0x2, 0x1f}}, &(0x7f00000001c0)={0x0, 0x20, 0x48}}, 0x400}, @increfs={0x40046304, 0x1}], 0x71, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47168fa877b8e97432342adeb305740b9999309107354606b486434ff09289722928124efeaa17aee61fbd2acb9530303e4b35016cacb9aa3e"}) 14:20:33 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x9c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x64, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f2404d2b4e2b0582c2b96e984e623c2007af2eab8ce5021565f642aa21a65e5b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b273ea80785e14a639526a6bdd4ef32264fcbbb019b6c5f78bb4d2ff1f2a1bee"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x32}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x9c}}, 0x20004804) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x30, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x20000004) 14:20:33 executing program 2: r0 = gettid() syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) r1 = getpgrp(0x0) rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000140)) rt_tgsigqueueinfo(r0, 0x0, 0x39, &(0x7f0000000080)={0x2a, 0x9, 0x1}) read$snapshot(0xffffffffffffffff, 0x0, 0x0) 14:20:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x9c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x64, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f2404d2b4e2b0582c2b96e984e623c2007af2eab8ce5021565f642aa21a65e5b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b273ea80785e14a639526a6bdd4ef32264fcbbb019b6c5f78bb4d2ff1f2a1bee"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x32}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x9c}}, 0x20004804) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x30, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:33 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x100, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r3, 0x0, 0x0) read$snapshot(r3, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="1a4f000000c29e2fdbeb4f0e4a92f19143df7eca47bec55dd3e3082252a006"], &(0x7f00000000c0)=0x22) 14:20:33 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000040)) 14:20:33 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x60, 0x0, &(0x7f0000001300)=[@dead_binder_done, @decrefs, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000015c0)={@fda={0x66646185, 0x3, 0x0, 0x26}, @ptr={0x70742a85, 0x1, &(0x7f00000014c0)=""/226, 0xe2, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/29, 0x1d, 0x2, 0x1f}}, &(0x7f00000001c0)={0x0, 0x20, 0x48}}, 0x400}], 0x71, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47168fa877b8e97432342adeb305740b9999309107354606b486434ff09289722928124efeaa17aee61fbd2acb9530303e4b35016cacb9aa3e"}) 14:20:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:20:33 executing program 2: r0 = gettid() syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) r1 = getpgrp(0x0) rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000140)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r2, 0x0, 0x0) 14:20:33 executing program 5 (fault-call:1 fault-nth:0): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:20:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x9c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x64, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f2404d2b4e2b0582c2b96e984e623c2007af2eab8ce5021565f642aa21a65e5b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b273ea80785e14a639526a6bdd4ef32264fcbbb019b6c5f78bb4d2ff1f2a1bee"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x32}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x9c}}, 0x20004804) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:33 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x14, 0x0, &(0x7f0000001300)=[@dead_binder_done, @decrefs], 0x71, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47168fa877b8e97432342adeb305740b9999309107354606b486434ff09289722928124efeaa17aee61fbd2acb9530303e4b35016cacb9aa3e"}) 14:20:33 executing program 3 (fault-call:1 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) 14:20:33 executing program 2: gettid() syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) getpgrp(0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:33 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:20:33 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x14, 0x0, &(0x7f0000001300)=[@dead_binder_done, @decrefs], 0x71, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47168fa877b8e97432342adeb305740b9999309107354606b486434ff09289722928124efeaa17aee61fbd2acb9530303e4b35016cacb9aa3e"}) [ 553.648148] FAULT_INJECTION: forcing a failure. [ 553.648148] name failslab, interval 1, probability 0, space 0, times 0 14:20:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)={r1, 0x9f, "5212d6e3f5def8e524246a934644bce9b6c910dc8d595780f2b6d6276a2fec7698fbf7defab80890bc127b35cab738c79d22aeee392f0e3951e8db0d255c64bcc3d33355c7ef4b930b890792c35bfef5b0596bb44c4086835174887c05ae154bc6818a1eb11fb2dda81cefd9e516da5718ae5435605f891f02217acc95b739750d77f2e8308663cd8200c58107918139cd74d30af85a20a2dc7d6371067b7d"}, &(0x7f0000000140)=0xa7) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000180)={0x9, 0x7, 0x3, 0x7fff, 0x5, 0x8, 0x5, 0x0, r1}, &(0x7f00000001c0)=0x20) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYBLOB="c800000037654b9dbe1a9fc3e89363122aaabe276ba0ef6d8b736df981f6871ef84b778c2ec8bf290479dcf1e329d1f0a444e4c4419af37398f27aefd7e72cb699bf3c83111720ab469fa2e0818d2797275796007852d5cb4fb37b32c1802a188d50fcd4c4978a47c72a20c4b267244a1148372b6dd9e551759f322d864da47a33436d3b583bc8ed8565688a2c4f3155a276942c9e3909ca633646d7294e618d0888d6750010616d5ed439bd42cdeb6acfa7e490cc8ccedbef537f01898c1427fe87565ac9ac7f85ea1aa6a6"], &(0x7f00000003c0)=0xd0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)={r3, 0x5}, &(0x7f0000000240)=0x8) 14:20:33 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000140)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, 0x0) [ 553.703988] CPU: 0 PID: 14351 Comm: syz-executor.5 Not tainted 4.14.228-syzkaller #0 [ 553.712953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 553.723826] Call Trace: [ 553.726688] dump_stack+0x1b2/0x281 [ 553.730336] should_fail.cold+0x10a/0x149 [ 553.734835] should_failslab+0xd6/0x130 [ 553.739180] kmem_cache_alloc_node+0x263/0x410 [ 553.743801] __alloc_skb+0x5c/0x510 [ 553.745258] FAULT_INJECTION: forcing a failure. [ 553.745258] name failslab, interval 1, probability 0, space 0, times 0 [ 553.747903] netlink_sendmsg+0x901/0xb80 [ 553.747919] ? nlmsg_notify+0x170/0x170 [ 553.747927] ? kernel_recvmsg+0x210/0x210 [ 553.747946] ? security_socket_sendmsg+0x83/0xb0 [ 553.778037] ? nlmsg_notify+0x170/0x170 [ 553.782034] sock_sendmsg+0xb5/0x100 [ 553.786778] ___sys_sendmsg+0x6c8/0x800 [ 553.791112] ? get_pid_task+0x91/0x130 [ 553.795042] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 553.800122] ? lock_downgrade+0x740/0x740 14:20:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0xd23d, 0x8, 0x8000, 0x7, 0x1f, 0x8, 0x2, 0x40000, 0x0}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x4, 0x9, 0x201, 0x8001, 0x3, 0x1, 0x0, 0x1a12, r1}, &(0x7f0000000100)=0x20) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000140)=""/2, &(0x7f0000000180)=0x2) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000000)=0x2, 0x4) [ 553.804938] ? __fget+0x1fe/0x360 [ 553.808886] ? lock_acquire+0x170/0x3f0 [ 553.813242] ? lock_downgrade+0x740/0x740 [ 553.817453] ? __fget+0x225/0x360 [ 553.822436] ? __fdget+0x196/0x1f0 [ 553.827413] ? sockfd_lookup_light+0xb2/0x160 [ 553.832441] __sys_sendmsg+0xa3/0x120 [ 553.836266] ? SyS_shutdown+0x160/0x160 [ 553.840411] ? wait_for_completion_io+0x10/0x10 [ 553.845261] ? SyS_read+0x210/0x210 [ 553.849150] ? __do_page_fault+0x159/0xad0 14:20:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x2d, 'memory'}, {0x2d, 'rdma'}, {0x2d, 'rdma'}, {0x2d, 'cpu'}, {0x6, 'rdma'}, {0x2d, 'rdma'}, {0x2d, 'memory'}, {0x2d, 'pids'}, {0x3d, 'memory'}, {0x2b, 'pids'}]}, 0x41) [ 553.853409] SyS_sendmsg+0x27/0x40 [ 553.857120] ? __sys_sendmsg+0x120/0x120 [ 553.861554] do_syscall_64+0x1d5/0x640 [ 553.865471] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 553.871293] RIP: 0033:0x466459 [ 553.874704] RSP: 002b:00007f853d40b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 553.882780] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 553.890159] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 14:20:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000100)={0x9, 0x7fff, 0x1, 0x380000, 0xffffffff, 0x0, 0x87, 0x7, 0x0}, &(0x7f0000000180)=0x20) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x4) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000000)=""/232, &(0x7f0000000140)=0xe8) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000280)={r3, 0x18}, 0x8) write$UHID_SET_REPORT_REPLY(r4, &(0x7f00000002c0)={0xe, {0x3, 0xc9, 0x2, 0xbf, "933172ad6a3b094903d7e68d47760baf1a2012b054fba7f6d9fb8e376346176acb2d28612020fd3427466bde64098faebd35b8690e20aa0d7c3f8e72783ef58aa4280973d08e0235826723bdd3917ec37bfcc6f52b614ea6c8ff294d8afcb86c47db4b6574af913a771a6b62f652b993658213af8d141e07b413c1a86a8eda8a1445182643dcbf60244629b9f0065b2c041f4dcc591e120b956452ba2beaed77741614589588ecf0352b960807cdaa8c85ca9eb936daeaf44d243941a9b3d0"}}, 0xcb) [ 553.897840] RBP: 00007f853d40b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 553.905701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.913161] R13: 00007fffe9e1862f R14: 00007f853d40b300 R15: 0000000000022000 [ 553.941755] CPU: 1 PID: 14358 Comm: syz-executor.4 Not tainted 4.14.228-syzkaller #0 [ 553.950432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 553.959979] Call Trace: [ 553.962804] dump_stack+0x1b2/0x281 [ 553.966637] should_fail.cold+0x10a/0x149 [ 553.970901] should_failslab+0xd6/0x130 [ 553.974903] kmem_cache_alloc_node+0x263/0x410 [ 553.979808] __alloc_skb+0x5c/0x510 [ 553.983475] netlink_sendmsg+0x901/0xb80 [ 553.987724] ? nlmsg_notify+0x170/0x170 [ 553.991745] ? kernel_recvmsg+0x210/0x210 [ 553.996271] ? security_socket_sendmsg+0x83/0xb0 [ 554.001240] ? nlmsg_notify+0x170/0x170 [ 554.005400] sock_sendmsg+0xb5/0x100 [ 554.009135] ___sys_sendmsg+0x6c8/0x800 [ 554.013216] ? get_pid_task+0x91/0x130 [ 554.017297] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 554.022167] ? lock_downgrade+0x740/0x740 [ 554.026518] ? __fget+0x1fe/0x360 [ 554.030267] ? lock_acquire+0x170/0x3f0 [ 554.034361] ? lock_downgrade+0x740/0x740 [ 554.038636] ? __fget+0x225/0x360 [ 554.042370] ? __fdget+0x196/0x1f0 [ 554.046052] ? sockfd_lookup_light+0xb2/0x160 [ 554.050844] __sys_sendmsg+0xa3/0x120 [ 554.056363] ? SyS_shutdown+0x160/0x160 [ 554.061082] ? wait_for_completion_io+0x10/0x10 [ 554.066657] ? SyS_read+0x210/0x210 [ 554.070459] ? __do_page_fault+0x159/0xad0 [ 554.074716] SyS_sendmsg+0x27/0x40 [ 554.078720] ? __sys_sendmsg+0x120/0x120 [ 554.083311] do_syscall_64+0x1d5/0x640 [ 554.088391] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 554.094064] RIP: 0033:0x466459 14:20:34 executing program 5 (fault-call:1 fault-nth:1): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:20:34 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x9c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x64, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f2404d2b4e2b0582c2b96e984e623c2007af2eab8ce5021565f642aa21a65e5b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b273ea80785e14a639526a6bdd4ef32264fcbbb019b6c5f78bb4d2ff1f2a1bee"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x32}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x9c}}, 0x20004804) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:34 executing program 2: gettid() syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:34 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) socket(0x17, 0x4, 0x0) r0 = socket(0x21, 0x4, 0x5) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) 14:20:34 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x14, 0x0, &(0x7f0000001300)=[@dead_binder_done, @decrefs], 0x71, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47168fa877b8e97432342adeb305740b9999309107354606b486434ff09289722928124efeaa17aee61fbd2acb9530303e4b35016cacb9aa3e"}) [ 554.098005] RSP: 002b:00007fd2ca365188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 554.107533] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 554.115377] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 554.122937] RBP: 00007fd2ca3651d0 R08: 0000000000000000 R09: 0000000000000000 [ 554.130303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.137582] R13: 00007fff24f4216f R14: 00007fd2ca365300 R15: 0000000000022000 14:20:34 executing program 4 (fault-call:1 fault-nth:1): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:20:34 executing program 2: gettid() r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) [ 554.210390] FAULT_INJECTION: forcing a failure. [ 554.210390] name failslab, interval 1, probability 0, space 0, times 0 [ 554.235122] CPU: 1 PID: 14390 Comm: syz-executor.5 Not tainted 4.14.228-syzkaller #0 [ 554.243858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 554.253738] Call Trace: [ 554.256763] dump_stack+0x1b2/0x281 14:20:34 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x9c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x64, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f2404d2b4e2b0582c2b96e984e623c2007af2eab8ce5021565f642aa21a65e5b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b273ea80785e14a639526a6bdd4ef32264fcbbb019b6c5f78bb4d2ff1f2a1bee"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x32}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x9c}}, 0x20004804) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) [ 554.260567] should_fail.cold+0x10a/0x149 [ 554.264921] should_failslab+0xd6/0x130 [ 554.269720] kmem_cache_alloc_node_trace+0x25a/0x400 [ 554.275345] __kmalloc_node_track_caller+0x38/0x70 [ 554.281107] __alloc_skb+0x96/0x510 [ 554.285539] netlink_sendmsg+0x901/0xb80 [ 554.290390] ? nlmsg_notify+0x170/0x170 [ 554.295531] ? kernel_recvmsg+0x210/0x210 [ 554.301060] ? security_socket_sendmsg+0x83/0xb0 14:20:34 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x9c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x64, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f2404d2b4e2b0582c2b96e984e623c2007af2eab8ce5021565f642aa21a65e5b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b273ea80785e14a639526a6bdd4ef32264fcbbb019b6c5f78bb4d2ff1f2a1bee"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x32}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x9c}}, 0x20004804) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) [ 554.306633] ? nlmsg_notify+0x170/0x170 [ 554.311253] sock_sendmsg+0xb5/0x100 [ 554.315327] ___sys_sendmsg+0x6c8/0x800 [ 554.320230] ? get_pid_task+0x91/0x130 [ 554.325180] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 554.330977] ? lock_downgrade+0x740/0x740 [ 554.335940] ? __fget+0x1fe/0x360 [ 554.339823] ? lock_acquire+0x170/0x3f0 [ 554.345922] ? lock_downgrade+0x740/0x740 [ 554.350262] ? __fget+0x225/0x360 [ 554.354003] ? __fdget+0x196/0x1f0 [ 554.357998] ? sockfd_lookup_light+0xb2/0x160 [ 554.362882] __sys_sendmsg+0xa3/0x120 [ 554.368273] ? SyS_shutdown+0x160/0x160 [ 554.372702] ? wait_for_completion_io+0x10/0x10 [ 554.377817] ? SyS_read+0x210/0x210 [ 554.381643] ? __do_page_fault+0x159/0xad0 [ 554.386565] SyS_sendmsg+0x27/0x40 [ 554.390318] ? __sys_sendmsg+0x120/0x120 [ 554.394460] do_syscall_64+0x1d5/0x640 [ 554.399116] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 554.404694] RIP: 0033:0x466459 14:20:34 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x9c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x64, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f2404d2b4e2b0582c2b96e984e623c2007af2eab8ce5021565f642aa21a65e5b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b273ea80785e14a639526a6bdd4ef32264fcbbb019b6c5f78bb4d2ff1f2a1bee"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x32}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x9c}}, 0x20004804) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) [ 554.408214] RSP: 002b:00007f853d40b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 554.416764] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 554.425861] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 554.435215] RBP: 00007f853d40b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 554.444046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 14:20:34 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x60, 0x0, &(0x7f0000001300)=[@dead_binder_done, @decrefs, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000015c0)={@fda={0x66646185, 0x3, 0x0, 0x26}, @ptr={0x70742a85, 0x1, &(0x7f00000014c0)=""/226, 0xe2, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/29, 0x1d, 0x2, 0x1f}}, &(0x7f00000001c0)={0x0, 0x20, 0x48}}, 0x400}], 0x71, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47168fa877b8e97432342adeb305740b9999309107354606b486434ff09289722928124efeaa17aee61fbd2acb9530303e4b35016cacb9aa3e"}) 14:20:34 executing program 2: gettid() r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) [ 554.454101] R13: 00007fffe9e1862f R14: 00007f853d40b300 R15: 0000000000022000 14:20:34 executing program 5 (fault-call:1 fault-nth:2): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:20:34 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x64, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x7fff}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4004090) 14:20:34 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) write$khugepaged_scan(r0, &(0x7f0000000000)='1000000\x00', 0x8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, 0x0) 14:20:34 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x9c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x64, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f2404d2b4e2b0582c2b96e984e623c2007af2eab8ce5021565f642aa21a65e5b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b273ea80785e14a639526a6bdd4ef32264fcbbb019b6c5f78bb4d2ff1f2a1bee"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x32}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x9c}}, 0x20004804) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:34 executing program 2: gettid() r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:34 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x60, 0x0, &(0x7f0000001300)=[@dead_binder_done, @decrefs, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)}, 0x400}], 0x71, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47168fa877b8e97432342adeb305740b9999309107354606b486434ff09289722928124efeaa17aee61fbd2acb9530303e4b35016cacb9aa3e"}) 14:20:34 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040)='NLBL_UNLBL\x00', r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="04002dbd7000fcdbdf25010000001400060067656e65766531000000000000000000140006006c6f000000000000000000000000000014000300ff02000000000100000100000000000108000400ffffffff14000200fe8000000000000000000000000000aa0500010000000000080004000a010100876c0f1728a7a47a25945a215d24528a0ed87ffa57e628b20612a41e170ca7358ae66e2a03e5dc638d4ec4ae9337baf72bd6a10b2805aeb95330fa5f22000b89c252e236d1467ac7d32e3962797eb32ac44925774dca760e67e97e646634003f57a7bb561b57919e46d703efbe2f72bfb2f5054f8a72181ce9dc1767"], 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40097) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x40, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4040080) 14:20:34 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040)='NLBL_UNLBL\x00', r0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r1, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x5) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040)='NLBL_UNLBL\x00', 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xac, r4, 0x4, 0x4, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:mnt_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:dhcpd_initrc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0xac}, 0x1, 0x0, 0x0, 0x400c051}, 0x40048c4) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x2, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2a}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004098}, 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r5) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0)='NLBL_UNLBL\x00', r5) 14:20:34 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:34 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x60, 0x0, &(0x7f0000001300)=[@dead_binder_done, @decrefs, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x71, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47168fa877b8e97432342adeb305740b9999309107354606b486434ff09289722928124efeaa17aee61fbd2acb9530303e4b35016cacb9aa3e"}) 14:20:34 executing program 3: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000041) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x620, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xf5e}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044050}, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100), 0x8) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) 14:20:34 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x9c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x64, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f2404d2b4e2b0582c2b96e984e623c2007af2eab8ce5021565f642aa21a65e5b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b273ea80785e14a639526a6bdd4ef32264fcbbb019b6c5f78bb4d2ff1f2a1bee"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x32}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x9c}}, 0x20004804) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:34 executing program 2: syz_open_dev$binderN(0x0, 0x0, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:34 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r3, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x28}, 0x1, 0x0, 0x0, 0x40090}, 0x20000000) 14:20:34 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x60, 0x0, &(0x7f0000001300)=[@dead_binder_done, @decrefs, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x71, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47168fa877b8e97432342adeb305740b9999309107354606b486434ff09289722928124efeaa17aee61fbd2acb9530303e4b35016cacb9aa3e"}) 14:20:35 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, 0x0) 14:20:35 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x9c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x64, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f2404d2b4e2b0582c2b96e984e623c2007af2eab8ce5021565f642aa21a65e5b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b273ea80785e14a639526a6bdd4ef32264fcbbb019b6c5f78bb4d2ff1f2a1bee"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x32}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x9c}}, 0x20004804) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x94, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x10000}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x60, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x10, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 14:20:35 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x58, 0x0, &(0x7f0000001300)=[@dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x71, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47168fa877b8e97432342adeb305740b9999309107354606b486434ff09289722928124efeaa17aee61fbd2acb9530303e4b35016cacb9aa3e"}) 14:20:35 executing program 2: syz_open_dev$binderN(0x0, 0x0, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) r1 = socket(0x18, 0x3, 0x8) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00'}) 14:20:35 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x9c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x64, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f2404d2b4e2b0582c2b96e984e623c2007af2eab8ce5021565f642aa21a65e5b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b273ea80785e14a639526a6bdd4ef32264fcbbb019b6c5f78bb4d2ff1f2a1bee"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x32}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x9c}}, 0x20004804) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xbc, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:pam_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x13}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8001}, 0x4000841) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004800}, 0x81) 14:20:35 executing program 2: syz_open_dev$binderN(0x0, 0x0, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5dce415a2a0fca16"], 0x34}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x90, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x4c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x90}, 0x1, 0x0, 0x0, 0x4001}, 0x4) 14:20:35 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x2008082) 14:20:35 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000001300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x71, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47168fa877b8e97432342adeb305740b9999309107354606b486434ff09289722928124efeaa17aee61fbd2acb9530303e4b35016cacb9aa3e"}) 14:20:35 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x9c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x64, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f2404d2b4e2b0582c2b96e984e623c2007af2eab8ce5021565f642aa21a65e5b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b273ea80785e14a639526a6bdd4ef32264fcbbb019b6c5f78bb4d2ff1f2a1bee"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x32}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x9c}}, 0x20004804) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:35 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:35 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300)='NLBL_UNLBL\x00', 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r1, 0x20, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8001) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="14330000", @ANYRES16=r4, @ANYBLOB="010000000000000000001c000000"], 0x14}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28000}, 0x40001) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000000)={0xfffffffffffffffe, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4c084}, 0x0) 14:20:35 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000001300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:20:35 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:35 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x9c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x64, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f2404d2b4e2b0582c2b96e984e623c2007af2eab8ce5021565f642aa21a65e5b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b273ea80785e14a639526a6bdd4ef32264fcbbb019b6c5f78bb4d2ff1f2a1bee"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x32}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x9c}}, 0x20004804) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x8000) 14:20:35 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000001300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:20:35 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4008002}, 0x18844) 14:20:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r3, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x104) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x800, @loopback, 0x3}}, 0x8, 0x6c5}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) 14:20:35 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:35 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x9c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x64, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f2404d2b4e2b0582c2b96e984e623c2007af2eab8ce5021565f642aa21a65e5b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b273ea80785e14a639526a6bdd4ef32264fcbbb019b6c5f78bb4d2ff1f2a1bee"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x32}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x9c}}, 0x20004804) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0)='nl802154\x00', r1) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r6, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x114, r7, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x100, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x20}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6418105b}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x294}, @NL802154_DEVKEY_ATTR_ID={0x74, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2af}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5f34d374}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaae}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}]}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r6, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x40, r4, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x8019}, 0x8801) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r9, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, r2, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4c000}, 0x40801) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r0) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r10, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8841}, 0x2000c8e1) 14:20:35 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000001300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:20:35 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0)='nl802154\x00', r0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r2, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0xc0d0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0xa, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=r3, 0x4) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r4) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x54, r5, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "a84ba5cbeefe1c2b55aadfe25b6672d5"}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x54}, 0x1, 0x0, 0x0, 0x40010}, 0x8040) 14:20:35 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000018e7aa635919bbef21565e443d3673820edbbb3c1ae9aa42937fe21d8ab741b67128c3ef436d5b3baf3d2cbb3bbacd08c57dfe36ba72105848073f3e32038e79450d030ea4330afa0f0f4de7e4f6d6e7ece22725aab6944de2765fe80f171fe4ab2eb64e56d791f9896bda0d048d0e822dbf52a3232223b5286e40c0a358835053362b14654de02fd9f53d2213c018f4a438aa0752d2239f2a891aac1999b1820bbf70ed654a08c190eb51af95eecf53f86b9e12513fd3a2e2a0e6f4eea89379296c88", @ANYRES16=0x0, @ANYBLOB="00002dbd7000fcdbdf250100000005002100000000000500210000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0xc014) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) 14:20:35 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x9c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x64, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f2404d2b4e2b0582c2b96e984e623c2007af2eab8ce5021565f642aa21a65e5b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b273ea80785e14a639526a6bdd4ef32264fcbbb019b6c5f78bb4d2ff1f2a1bee"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x32}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x9c}}, 0x20004804) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x38, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x4004000) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:20:35 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000001300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000013c0)}) 14:20:35 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(0xffffffffffffffff, 0x0, 0x0) 14:20:35 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x9c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x64, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f2404d2b4e2b0582c2b96e984e623c2007af2eab8ce5021565f642aa21a65e5b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b273ea80785e14a639526a6bdd4ef32264fcbbb019b6c5f78bb4d2ff1f2a1bee"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x32}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x9c}}, 0x20004804) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:35 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000000)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0, 0xfffffffffffffc9b}, 0x1, 0x0, 0x0, 0x40801}, 0x4000040) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x40, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 14:20:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) read$snapshot(0xffffffffffffffff, &(0x7f00000000c0)=""/248, 0xf8) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4) 14:20:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000000)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "80769b352af8dd2749189daa20d8a1f39167b45f4df1744077d08a28b24ac72e"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40001) 14:20:35 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000001300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000013c0)}) 14:20:35 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(0xffffffffffffffff, 0x0, 0x0) 14:20:35 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x9c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x64, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f2404d2b4e2b0582c2b96e984e623c2007af2eab8ce5021565f642aa21a65e5b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b273ea80785e14a639526a6bdd4ef32264fcbbb019b6c5f78bb4d2ff1f2a1bee"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x32}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x9c}}, 0x20004804) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:35 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280)='802.15.4 MAC\x00', r4) sendmsg$IEEE802154_LLSEC_ADD_KEY(r6, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r7, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x40}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x79}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x44, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x4}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40) 14:20:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040)='NLBL_UNLBL\x00', 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xac, r3, 0x4, 0x4, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:mnt_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:dhcpd_initrc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0xac}, 0x1, 0x0, 0x0, 0x400c051}, 0x40048c4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r4) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r5, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004001}, 0x8000) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r3, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, [], 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3d}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}]}, 0x98}, 0x1, 0x0, 0x0, 0x800}, 0x4041) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x30, r1, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x480c0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x50, r3, 0x750, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:audisp_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048041}, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:20:35 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000001300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000013c0)}) 14:20:35 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done], 0x2c, 0x0, &(0x7f0000000040)="a0af5af3a7adfbd6fe9994cf536c2a3ff2051733d4d4ca0a8fbb7337f204c631b26d6e9f5fcf532a38c01b52"}) openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0xffffffffffffff6c) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) 14:20:35 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(0xffffffffffffffff, 0x0, 0x0) 14:20:35 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x9c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x64, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f2404d2b4e2b0582c2b96e984e623c2007af2eab8ce5021565f642aa21a65e5b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b273ea80785e14a639526a6bdd4ef32264fcbbb019b6c5f78bb4d2ff1f2a1bee"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x32}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x9c}}, 0x20004804) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:35 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000070bff564704ccdf77fce4cf60cd160a5fbe00287a38fa5b6b406a09ac17cc354cf54a5fb0e99507118746bed16fc5288ccbe", @ANYRES16=0x0, @ANYBLOB="000125bd7000fcdbdf250300000008000500ac1414bb"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8815) 14:20:35 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000001300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x39, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47"}) 14:20:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) getuid() 14:20:35 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:35 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280)='802.15.4 MAC\x00', r4) sendmsg$IEEE802154_LLSEC_ADD_KEY(r6, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r7, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x40}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x79}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x44, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x4}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40) 14:20:36 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000001300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000013c0)='\v'}) 14:20:36 executing program 5: getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0x8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000240)={r0, 0x1}, 0x8) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r3, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000140)={r0, @in={{0x2, 0x4e23, @multicast2}}, [0x81, 0x40000000000000, 0xffff, 0x74a, 0x7fffffff, 0x101, 0x101, 0x2, 0x7, 0x7f, 0x13, 0x5, 0x2994, 0x3bf, 0x8]}, &(0x7f0000000080)=0x100) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r4) sendmsg$NL802154_CMD_DEL_SEC_DEV(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xa, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x50}}, 0x881) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:20:36 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x81, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f00000000c0)) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, &(0x7f0000000100)={0x3e, 0x8}) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) 14:20:36 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:36 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000001300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000013c0)}) 14:20:36 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000070bff564704ccdf77fce4cf60cd160a5fbe00287a38fa5b6b406a09ac17cc354cf54a5fb0e99507118746bed16fc5288ccbe", @ANYRES16=0x0, @ANYBLOB="000125bd7000fcdbdf250300000008000500ac1414bb"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8815) 14:20:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES16=0x0, @ANYBLOB="040026bd7000ffdbdf252e000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8000) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:20:36 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000)='nl802154\x00', r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 14:20:36 executing program 1: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:36 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:36 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000001300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000013c0)}) 14:20:36 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r3, 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r4, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, &(0x7f0000000140)) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r5, 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r6, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xe, 0xfffffff8, 0x81, 0x3, 0x0, r2, 0x9, [], 0x0, r5, 0x5, 0x5}, 0x40) write$cgroup_freezer_state(r0, &(0x7f0000000000)='FREEZING\x00', 0x9) 14:20:36 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000000)={0xe, {0x0, 0x9, 0x0, 0xa0, "906cb42388f6aaa69bb58ab3adb9705dcd9029f809105f902f925599325eccb0941ef7fcac280c6dac16827ac3fa693df2b909a09c1f5c274c991bcc5da775149f3ab02f8768f91aa1d1136385ecd344f4afef9072dcda4f00784b22811ddb797c8b8b9be4cb8558c9f86f175df1a2a820b0382fb39e0e9a4a3ee0e71d2105ab8d53b0eafe2977c45e4a57d67c08c74ae3ba32e120ac74a03a6ec4d1b00c1555"}}, 0xac) r0 = socket$inet_udplite(0x2, 0x2, 0x88) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000000c0)={0x8, {"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", 0x1000}}, 0x1006) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) sendto$isdn(r1, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0xc4, 0x4008000, &(0x7f0000001200)={0x22, 0x3f, 0x2, 0x2, 0x8}, 0x6) r2 = socket(0x2a, 0x1, 0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001180)={'batadv_slave_0\x00'}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000001100)={0x1, 0xb, 0xa, 0x4, 0x6, 0x100, 0xd1, 0x7}, &(0x7f0000001140)=0x20) 14:20:36 executing program 1: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:36 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280)='802.15.4 MAC\x00', r4) sendmsg$IEEE802154_LLSEC_ADD_KEY(r6, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r7, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x40}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x79}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x44, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x4}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40) 14:20:36 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000001300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000013c0)}) 14:20:36 executing program 5: setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000)={0x1c, 0x4, 0x0, 0xf8, 0x5, 0x99, 0x2, 0x9, 0x8, 0x3f, 0x2, 0x17, 0xda, 0x8}, 0xe) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x4040) 14:20:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:20:36 executing program 1: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:36 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000001300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:20:36 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x9c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x64, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f2404d2b4e2b0582c2b96e984e623c2007af2eab8ce5021565f642aa21a65e5b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b273ea80785e14a639526a6bdd4ef32264fcbbb019b6c5f78bb4d2ff1f2a1bee"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x32}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x9c}}, 0x20004804) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd70005b1b820fa4dc2ad8f3f10c72fcdbdf25120000000c000600020000000200000005001300000000000c00060003000000030000000c000600030000000300000005001300010000000c0006000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x50}, 0x4000001) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xf0, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:ipmi_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x33, 0x7, 'system_u:object_r:systemd_logind_sessions_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:apt_var_cache_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x14, 0x7, '/usr/sbin/cupsd\x00'}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4015}, 0x20044091) 14:20:36 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) 14:20:36 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x48, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x78}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x4}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x91) 14:20:36 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300)='NLBL_UNLBL\x00', 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r1, 0x20, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8001) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="14330000", @ANYRES16=r4, @ANYBLOB="010000000000000000001c000000"], 0x14}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28000}, 0x40001) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000000)={0xfffffffffffffffe, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4c084}, 0x0) 14:20:36 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r3) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 14:20:36 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x9c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x64, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f2404d2b4e2b0582c2b96e984e623c2007af2eab8ce5021565f642aa21a65e5b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b273ea80785e14a639526a6bdd4ef32264fcbbb019b6c5f78bb4d2ff1f2a1bee"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x32}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x9c}}, 0x20004804) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:36 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) 14:20:36 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:36 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c230200", @ANYRES16=0x0, @ANYBLOB="04002bbd7000ffdbdf2501000000080004007f000001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c060}, 0x2) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 14:20:36 executing program 0: syz_open_dev$binderN(0x0, 0x0, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:36 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:36 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x60, 0x0, &(0x7f0000001300)=[@dead_binder_done, @decrefs, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x71, 0x0, &(0x7f00000013c0)="0bb03b1532fc1ddd4d98cdcdfdb9dfd74bcfa3d9815de387fbf3aa56b06a908fca96362ac324fc655cdbedd025f238dc4967750219132dcd47168fa877b8e97432342adeb305740b9999309107354606b486434ff09289722928124efeaa17aee61fbd2acb9530303e4b35016cacb9aa3e"}) 14:20:36 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00 \x00', @ANYRES16=r2, @ANYBLOB="00012abd7000fcdbdf252700000014003000358f942e65266f4f50635877e13bef0708000200", @ANYRES32=r3, @ANYBLOB="0c0005000200aaaaaaaaaaaa"], 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000015) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="84000000", @ANYBLOB="3d2bc760e7c7c4f8aec36815924486fa8b8c760979d04e81695ece8a238f40b3c5a534ef9778196e41646fa0ddbd9171b0b38f2201866093207411e7c00c0ee39551658c98d4a699ede0fc15f5c15ffb70e2d7cdd2424ecf0b1ec76775466058e807cfbbeb58d7", @ANYBLOB="00042abd7000fedbdf252700000008002c00030000000800024efaad18e6d22fce5d60ca271c48d60e6aa83647138dfb47050eaf55891d85c0bbf42c0d58a10b461f529a1475fd741bd9ecb03d", @ANYRES32=r3, @ANYBLOB="08002c001f000000240032004a0b8a0fc8aec4ced889ac5bfdf61e590deed2ae9c90f301dfea4c2b608eb4250a0001007770616e300000000c002d000201aaaaaaaaaaaa06000600ffff000005002b00030000000c002d000201aaaaaaaaaaaa"], 0x84}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000044) 14:20:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x81, 0x8002, 0xffffffff, 0x4, 0x0}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)={r1, 0x1000, "b0b7b064da51c67316311f09c058df68924c8927013495dfaf348319ce5c9d1abf6d6fbdc7021559a95452454e648ac816bd356da2c8729a0907e476838d6974aeb4231e107a36ac647a43f5e220cd5930857d630668d2631380856f5988fd8200b48017daf90e0b86e58e1620071111d67d175cbac49deb44ae75c30e5ef4e30c2dbde493e3e413c9951de3ff456f3638fb6246b726e2416505d3d47a7b131a0bd9283b8cbe1e56e0c45fa2f9ec94d7a18e7b81ac1793fb5a9213c0880dfac1d8e9a5ac685c8f6a2443b845e00f7d7324f438d7e64e44df32c8869545cf29ef2abdb03610e57622de08675b33018a3182aef7dab67012353f282f33fed3ad48092c8387d34eb090171e31e83560a9965b4a648ba53df400d7495ecce9fb0752c18bfe7d1033ba4c4e0c6647c11a0f409429bac8aa4aeade0696662f4f2e55e14b3a6c2a317373ab1a121fd7c5798986d7a210205139138ff914bccb32021175512c8347e12362171f69685ff58d614785e2058d39264cd6fda76ba30a898f3a7c0f8aced557ba2f23625032e7f8b87846602f260db21f8f9c27a3b392c7ad57240c04bf8e7713addf7464ad79cce39873bc293f17c9a1526696238593710d336a41eb20edcbbedef430d2544ca196cc1045a581fa9ccb5cfc9ba2131fd52479dbacee398bd6ac58b20287d1ecbb73bf879b2f786d8186032d5808a9079df207787e8d2109360d489767eb890dae19f9e434d59af916bd65d9cab7e4add3f3ac3c76a7b8446023ab39f258e3de0da1e78a484cac26e8f09a5d236dd065874a54993180557ec85bc30c6867ca5db5193aadbfc14c26d7ae6da2a4040e79a39b393e8806ea7117ad29c0181d7d24116aa3c2db54857c7603114ca28336bc93a721b4f4a0cd904f80f52a50ecb9079552a5f8b17d2c9648f1c33707d8d3bf506c672c6a7f40a0435f840ae01c86d36021dedca16f0b2760db262e65e4be35774fe44df3d3043925d42838f5ad438da483e4b0829da6e48ab6038d6af3e0b24185a3face2a3965deaf95f1197fa1598e0c5d743df3a5606e17115e86d6014dffd57f99afd6bc378cd767c78dfb01959b759495f4003a399c3267daaa287397086ff2e38ae03df68881e1a9920f98f32b4618a1744e8e0689405574bf879db308fdcba43b7f5d929c0acea3c47fa1d2efb8cd02900b37c590fd9aec3b9b659e0afd23663047959bd768c58cd38d3a6e233af784a213ac28661885731ee507782c642c2fc15865b836c2511eb2ea4551cbd43c4a6fbc4b187a2d868b917f3ce85d769ee064dcaea009f30cd557df9e4d48d743093c8ad079b4d35899c7ac4f89e5d6720b60e8512f8977fa9096c4da4b97bfd4c653810d2b85fcd2cfa398b8cd1cdffff33a5073fd9ebada65dd9cdad96bb9cc0329f437eb856e4cbc95cc116807e6306979fd811d731cf786c33350cd3198493bc2efee85d9df3dfdea128e72a3cfe0d58114ed06f87b2798adff74152dd48038890cdad9c2e57e7c4ba52f6d18a422c58faeda65b3e2f258fb91735926c78467d4b3ecde18a03827ab6e863ec5f7314c90b2146dd2d89502d7c5a813b804e2573cca41ab583c428f43b73a0d62cf766d2b5b580c4b125277cb02c4141913ee747c6d7f4da8d11f758c834fcd9c206d6dcbc43a14733e39eef25cddf10197245da1b103864e7795b0da655941e88215cb1026fce727dd9371b744d061f389984d5fe565c7329bc39d13cd806df3b874c96721115cab7b2622bc5da04d20c2d7b17167e7bbef62f2e13eb15c2a45d2e5368369957b4a09782dd91ca07289e5c3d1d98425e2f89a4a5c6a8169c81d15e53d0fc728145a011732ab2ea033f5877f627327f978bdfb08918b8eb2b69bd1ce4e62c271b98957d797fbecffbe79751960b9350e487cc541782efcde722ea560343e91ea78b68067c523ac0322b3598c264ccbecb1a03ab3402a4b5cb083aae76c377ac1ca2d39e5d49fdcab66537a70ebbcba62e14da18611ff69b5cc12e5b829f3d9ff1c587774e4f42d553f866922fe79028acb120d2a758958fae7ef24fe54a5374cdaee1303693d14d47c7bdf06b8dfbc4e62ffac50b256bebcfcc51fb859a5c59e9b8a84ba7687591f4c412f03e386b3398b893206b8a2f945fdc4bea23c8e2008f1affb3849c0dcfea50188db21c153e3494ea3a23fd928a68648fcf123ba2bb4af5af32ae02044cd0087f2dc39be1cf2ae102cd0bbcb63fcbd13f57bbab3e62598339760e52e65671d6f67d5f8439aaef727d6136d640d5506a5a9df925d3a528265734b04ac7fca0f0b78e023232c17c357f37d52d8b21fa6f1932f0d3b3ad1e52cc7d2603f9f608a8503e37078125483afabb53079cf49c40b753f0099961f15c340f982a372c2dc94964c8cdde0b818bc909f20527b6c1a36b8b6b3b18d6f5ca3a70f013a326cb3ecd17c3a1fe6e2a41631a346217821364cf24d311337c99a7551231cb51bd3d60fb39434c72412476caaf946f9d626bb6cae9dcea7c1c7accac221f9157feb4795e81b44ed91a6566845ac12af191de7271754ec48bd3b0a27e2145984a989990fe04951091ff3e64a1d903eada1b1c1b9fbbb435acf789d29374f8d196bb11c7feaa6ec229aa214fa25789e968a90acef549e5861d815f9019f03ed8a047fdfec687bb917821d4b1cafd0b6861647e825f0b5f0ea4c4171c56f26298179e5152e71f6a23534b28ee035595eeef155fc5b54524533eacbdddb8743b11d798ec33924d6f935a8df9cda04b9287f82e5f081f5ca8b1ec8586f982456c2cc569d1f74c2de027e9e3f0f9757e73a4d97e2ef5dd43eb3b4e0b110ddfb054323cddf74b1bdde09ec7518173bfc6322856be7e5bcc8dd880ec7416abfe18eee734e16ac258fad16d0318cd9b9f437aa510f67da6c933dc17b396b956a6bafe926839699c72dcf33a897203bb678956b1841a64eb9c83aef16a7ba7d6b04941797ccedf3f1bcdf41f7935b01cf30f0f1865f6876da2227350c2a8c5110326e397b952f9235cb765fac4422649ca3dfdc15308bc7dbdd8b35e4cb31773e4790f0fb5316cfda0129730cdcfb519e962bf18d7d36f80aa92baa895bcce525411a87c4560ec463304c96e0e1e1f2b3eff4a7bf737f336d19b73334882a4410260965a74a92f0696218edb8358cb06216762e74ecfd8fb3a3d0193c4f836cd76ab727d9ae2268f34145b6c6086461bc932c7f126d91eaeaf1bd789f0b8bdc57357e079547477b7c0855bb68c7dffdfb5e01e169df694c64db425ea4408e3081c9f672ddbdc253ace8ce5ca85edd82c60db2d06247b9e28c145fe36b7231958dda944a86ec17b6024efd021429ef2728654b8deebd8859a18e8a8602be3f25c4f129057071a6fe5ff66715c6b380f497bc441e53987d56aa89b7be1de84f4947b1fd64859ec99aa8242f9554d7b27c95ce853d92ad15cfcb96458442847a2489ed23445d3e99b6e3b1954d452b70c60b9edfb1115402fe190289ad6ef5dbe292b6dc7eac3e526b9be9d2ceb651d346f3e0dc8f7bef32b7e11e52033af9a65120893ff7a85a012b00aa45064eefde63a130c8a6192eaa7ebc468678a091e640e8ff4449f8a030ca0fc0eaf2207fa765e1105dfe897a38c97146947383c13678215121ce3807ffdd0f43ddc0fce35026876903440ac0ad2027ea9c823d596fbb7dcc50d59d41bc6b9f6a1e4b5984896d91f1fc1ab66ed2d47ee0d60bc95593ae09b753bfdc056aade84fa55ab88f98f91afc9c7b15d84c13919cb7e34e3149ea6046a66aa1e93244847abd60553d2305c1dc1c16a52ced8363e314453d0f551d8129e61c0a7fa0068caad73c179e864a5579dea9a4c6b574d90be6a277d17d80f97ad75a4741e738c98f6135f2905a77867293f1ae37062d49271eb69ae8c9118d83d1d7e392be0db80b925ee0354b45e74b7bcd74de530bd52c54cf611ad503a4bcb88cfc27f30eaf08dc675a82839a2fdca703bd77d39ee3c6f41e7a4ac3b88ceb7605491b6ba12b8a344ca81071998f978096ba3596b381df5d1a107f5027903e90ddf22d28a0626ca1628ba1ba2c4eaa4b63432e2ba75c5ce2be56e461e0a310f89161fde94eddd39b3ed3a8528f0d0a98bd9e4551cf892bad499b47bf19c3116f7938d82cf8fb5ff85f422cb410f8131608b25bcbbe58e35d29d287d2b0df5627a303bde2efd160e5286e2c377d82ccb7d5da93d842951631dafb57c34b3b7e7e4f1b4bc4146a4020ac56f8c6153d3d982af3c49791c2804e7e1e42daa12884d6189078d2af5278bc738e4d655ee013c16384f86289a3fd8fd5e35b5ad4320b90d80b0e9437bc6b7a99fad1e1e0a2846dc9e1ff260d1038b64b5c356416500c5b54420fe36e87b695ab6f4e91b798687af2f47cd24cc07e8d6e454f629123ce8f28f0bc61965ec6e6ab09eee3f15859e5a90c9cabe4e7e9e542f371e2a22c92f3430474f93a68464f023dfe4a43f1000f810c9ac65b9571461f000a2174e02ed9d1c49e23601267eca92deb6d4682c7557a39e5f854e397e236b9b2e731dc49e9b4496fc66a28762eb6ad5cf564a1dc70dd11d59160cfa76bae7d02db4034d68b93da4441c1913a71e96a9351de47d7f99328675e55b022246ede9fe3265be3a83a1426081b0b7fe1a4bc41479b7d459b7c457dfc359266bef983e36ae687c72fcce225feee337b39a6736aa5af4e11b5349fc0826e42a30df26b7852da5a79dfb50ac937ef9d726ea9dbb7adeb88e3fe098b493d2c96a66c3093385f1f3a6a405d84b2898b5752dd6ea3909449dd9e9c040644c737c3b29547c6def288ad10e6e2d1ffaa5aedc3503fc5770c127fd396b0bad712dd015d64ca4d00b6d62e6705589d783bf2e5c9bdef2f71a3b00c60c493075a52a4406f81fc297e12fd8513a447a762865bc185fa6dd873de35db27ac2ce3751622c70b35859b0e3d98749a6ed1dafb246e336be63f57cf91e84bcd932ad82c14caec3e840c3129ad14f0b751326b54605ab5a981679b92afdb3a72ec5b95dfe461ff69a9b42c8ef227f1a4e99e3a276dcd95778e2d26bb60edb33e9d0a5fbb679305655635fe37b5e12ecd61d07f63d4edaf624f63ea318d8f18f2a4d379a25bf970ebf08cebb658d66f5ffc8e825df890a55219fa7df8974032fccdc556e73c2d88e628c0c9fd65c7556d77a7129b7b84a23d4c9019a7be940c1bd9c7e1f70dba92a30ead752a8d5c1eda27d8c09e469a939708d418dfb74f3fa859fad470c4fc707238033f9103c77f9b89b54f68f1b06b261a8beb0c6f6a576abcb1e452466d44a6c8eddfba160ac8cf6bb1a0dcb07e69170d7284e6522e98831c7a6ba156b9e07a8ae64978437216249e57c9fc8c2631d8e8b1f79e6f2fdc45318a1864a844f297df3b1983c48c25232636ca5c4a0dd82d20561021f294036182fa74cc873d7501260c2f01fc94c33fd2784fa17cf8cd764ec0c84f16fdb928608938ddb9850fd3d12e03ce58e873c02cb8f982be66795190adce3351d61b0adc420c7e938bf6644c9ddde7df1f0862c8b0ea54d670a8c28d9b2b6fadb3d80aa116689509bd27af2fb8096b82190eecd0e49119e7aa2c014dea64221516401ce4b322fdcadc4100c79c0d78fef2b97f06deac5efb1c4f4de1db94d4dbe0651b9f8ff917a0b463016de069dd941d7b3d4c8eb18ead333194e68d65ebcc95de5e802588b3bab2dccee15b723bbc80969edbb9f2a7933b839d69ba58ed294fd2dab8a5b21ba0cc95b3d4"}, &(0x7f00000010c0)=0x1008) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) 14:20:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f00000002c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0xc854) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040)='NLBL_UNLBL\x00', 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xac, r3, 0x4, 0x4, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:mnt_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:dhcpd_initrc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0xac}, 0x1, 0x0, 0x0, 0x400c051}, 0x40048c4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r3, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x44054}, 0x50) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3cc0c1b0a81faf52}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8841}, 0x20040080) 14:20:36 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x64, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x7fff}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4004090) 14:20:36 executing program 2: gettid() r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:36 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:36 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000140)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, 0x0) 14:20:36 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x841, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r3, 0x0, 0x0) bind$isdn(r3, &(0x7f0000000040)={0x22, 0x4, 0x1, 0xc, 0x47}, 0x6) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, 0x0, 0x0) 14:20:36 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:36 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000000)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) 14:20:36 executing program 2 (fault-call:1 fault-nth:0): r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000001300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000013c0)='\v'}) 14:20:36 executing program 0 (fault-call:2 fault-nth:0): syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:36 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 14:20:36 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) accept$alg(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000000)) 14:20:36 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:36 executing program 2: syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x40600, 0x0) write$khugepaged_scan(r0, &(0x7f0000000080)='1000000\x00', 0x8) write$UHID_INPUT(r0, 0x0, 0x0) r1 = socket$isdn(0x22, 0x3, 0x24) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000040)={0x4cb, 0x3, 0xffffffff, 0x9}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x8, 0x0, &(0x7f0000000100)=[@acquire], 0x1, 0x0, &(0x7f00000013c0)='\v'}) 14:20:37 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r2, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1e}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:20:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, [], 0x22}, 0x7}], 0x1c) 14:20:37 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000ac0)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3f}]}, 0x30}, 0x1, 0x0, 0x0, 0x8840}, 0x0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x5c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x200}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x40}]}, 0x5c}}, 0x40000) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000080)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0xb8, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3f}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xff}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x1, 0x3, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x5a31b6de27408aa2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x40) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0xc20, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x401}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x50}, 0x1, 0x0, 0x0, 0xa0}, 0x4000) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040)='NLBL_UNLBL\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000640)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000680)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000b00)={0x1e4, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_KEY={0x144, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x74, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "253d0da4c048ba444990cf95d25f2404"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "af79b4717ce49f3e46fe270ae4056da0"}, @NL802154_KEY_ATTR_ID={0x78, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x900000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x100}}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "53d4dfac232d61cc3f16ef0465872557aa7b22b0cc4fc0d4b7d4f147abd7a683"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x58, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "d74279f9f8283acfbbf605ab17a76fd40bd611680d4c7aa326986576c1ba2f24"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x37f}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_KEY={0xc, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6d}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4844}, 0x800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200)='NLBL_UNLBL\x00', r6) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xac, r3, 0x4, 0x4, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:mnt_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:dhcpd_initrc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0xac}, 0x1, 0x0, 0x0, 0x400c051}, 0x40048c4) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8808800}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0xc4, r3, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'caif0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:tpm_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x32}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x37}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, [], 0x38}}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:systemd_logind_exec_t:s0\x00'}]}, 0xc4}}, 0x4004000) [ 556.827972] FAULT_INJECTION: forcing a failure. [ 556.827972] name failslab, interval 1, probability 0, space 0, times 0 [ 556.870205] CPU: 0 PID: 14753 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0 [ 556.878136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 556.887585] Call Trace: [ 556.890186] dump_stack+0x1b2/0x281 [ 556.893998] should_fail.cold+0x10a/0x149 [ 556.898154] should_failslab+0xd6/0x130 [ 556.902164] kmem_cache_alloc_node_trace+0x25a/0x400 [ 556.907282] __kmalloc_node+0x38/0x70 [ 556.911120] kvmalloc_node+0x46/0xd0 [ 556.915131] seq_read+0x882/0x1120 [ 556.918852] ? lock_acquire+0x170/0x3f0 [ 556.923277] ? seq_lseek+0x3d0/0x3d0 [ 556.927107] ? lock_acquire+0x170/0x3f0 [ 556.931432] ? full_proxy_read+0x65/0x1a0 [ 556.935698] full_proxy_read+0xfb/0x1a0 [ 556.939679] __vfs_read+0xe4/0x620 [ 556.943228] ? full_proxy_unlocked_ioctl+0x190/0x190 [ 556.948425] ? vfs_copy_file_range+0x9b0/0x9b0 [ 556.953015] ? common_file_perm+0x3ee/0x580 [ 556.957355] ? security_file_permission+0x82/0x1e0 [ 556.962378] ? rw_verify_area+0xe1/0x2a0 [ 556.966441] vfs_read+0x139/0x340 14:20:37 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="200027bd7000fedbdf25070000000cda9dc166dc6ee7c30000fbe116cd5a9fbf4d0008000300", @ANYRES32=0x0, @ANYBLOB="0c00060000000000000000000c0006000000000000000000040017000201aaaaaaaaaaaa"], 0x54}, 0x1, 0x0, 0x0, 0x8080}, 0x4000000) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0, 0xfffffffffffffe8e}, 0x1, 0x0, 0x0, 0x20000004}, 0x400c890) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x80) [ 556.969926] SyS_read+0xf2/0x210 [ 556.973306] ? kernel_write+0x110/0x110 [ 556.977287] ? __do_page_fault+0x159/0xad0 [ 556.982760] ? do_syscall_64+0x4c/0x640 [ 556.986753] ? kernel_write+0x110/0x110 [ 556.990728] do_syscall_64+0x1d5/0x640 [ 556.994626] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 556.999817] RIP: 0033:0x466459 [ 557.003015] RSP: 002b:00007f92f6ae1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 557.010729] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 14:20:37 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:37 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040)='NLBL_UNLBL\x00', 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xac, r2, 0x4, 0x4, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:mnt_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:dhcpd_initrc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0xac}, 0x1, 0x0, 0x0, 0x400c051}, 0x40048c4) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x60, r2, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:sulogin_exec_t:s0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x804) [ 557.018099] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 557.025376] RBP: 00007f92f6ae11d0 R08: 0000000000000000 R09: 0000000000000000 [ 557.032660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.040625] R13: 00007ffe1e08d6ef R14: 00007f92f6ae1300 R15: 0000000000022000 14:20:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)={0x1bc, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x124, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "68b311da6d6e3a8fe25fcf5b23cc6de312683940810cb98266690c74675e3958"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "61a97bd83e369294f7165e2b97fd2efce9d08497db39ef04b0f295f74b769fe4"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "c1a10852538bf72d3c4db5c2c678ea7c3c23ab39c506f9dc3173059917fa8b47"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xbc}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "0e3d08dc9191f2ada1a2eba7abbbb546e6feaae25d43e4b35547cccecef79fcf"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "040e48a72b8867c18fa4d4e79ea89b7f673528e8030fd0eefa4237a9308fd200"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x38, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2f000000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "93d346ac7d732dda09d7a84242efd010552b78c2c56898b922c2f71d127b55e0"}]}, @NL802154_ATTR_SEC_KEY={0x70, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "9c8576be79d28d4afbfb70b93d54478f"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "5bf6d97766b4c57b4239ff00a2fff404"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a31a59ffd0b53f6bec5ec5803517f6848c920e2fd635cfecc2696d057cdf506a"}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x8080}, 0x4000001) 14:20:37 executing program 0 (fault-call:2 fault-nth:1): syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004004}, 0x4040) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, 0x0) 14:20:37 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:37 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000000)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0, 0xffffffffffffffce}, 0x1, 0x0, 0x0, 0x4008080}, 0x10) 14:20:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 14:20:37 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x6c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r1], &(0x7f0000000300)={0x0, 0x20, 0x40}}, 0x400}, @request_death={0x400c630e, 0x3}, @request_death={0x400c630e, 0x2}], 0xc2, 0x0, &(0x7f0000000140)="47682ff191be9dfa28071130e44273163e190a46aff5d98d26639cd1d1a62659c9ad8f388b4e25ac86b499f5ee243a21b40877a162d8f474c33598333baeb5e37680f1a14884db8f585bb8513e866f581199a6f4a5b98d37fcc764878d47f695df475d287a0f070d286d2c9e771313a22cbbad1f15402eba73ea7b0d4c984097f6c3be581686843eb424f058db62b453f3cffd0eaf47428ff9dc07f1730c864d11ca9577b2013ffd87afaa176ef1b1f1a8099cb26a94c0fc025c2ecf187e569cca3c"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x5c, 0x0, &(0x7f00000004c0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@fda={0x66646185, 0x4, 0x1, 0x10}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/192, 0xc0, 0x2, 0x30}, @fda={0x66646185, 0x1, 0x2, 0x38}}, &(0x7f0000000000)={0x0, 0x20, 0x48}}}, @clear_death={0x400c630f, 0x2}], 0x1, 0x0, &(0x7f0000000100)='\v'}) 14:20:37 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x1c) r1 = socket(0x2b, 0x1, 0x0) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed}, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000001300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000013c0)='\v'}) 14:20:37 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:37 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x1000, "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"}, &(0x7f0000001040)=0x1008) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000001080)={r1, 0x8}, 0x8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, 0x0) 14:20:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280)='802.15.4 MAC\x00', r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', r0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000700)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000780)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x30, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="020000008f2725ddd2483d67fb110148909bfbb5072b4f85546102df3cf2e7fa3608c2b58f82f8d16e208503a6f5feeb036afd316464b0dd6803359926a437203d7ccabd549cc2c992940f6e85020c55f2420a30e2ccc40e63f4af22", @ANYRES16=r2, @ANYBLOB="000328bd7000fedbdf25210000002c0022800800030004000000050001001900000005000400000000000800020003000000050004000100000008000300", @ANYRES32=r8, @ANYBLOB="4c002280050001000000000008000200020000000500040000000000080003000500000005000100ff00000008000300090000000500010081000000080003000200000005000100070000003c00228005000100070000000800030009000000050004000100000005000400000000000800030004000000080003000100000008000200010000000c00060002000000000000000c0006000300000000000000", @ANYRESDEC, @ANYRESHEX, @ANYRES16, @ANYRES32=r4], 0xe8}, 0x1, 0x0, 0x0, 0x4111}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000580)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="0c0d2dbd7000fedbdf250c00000008000300", @ANYRES32=r9, @ANYBLOB="a8222d177e02"], 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x800) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r10) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0)='NLBL_UNLBL\x00', r7) sendmsg$NLBL_UNLABEL_C_STATICLIST(r10, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, r11, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:cgroup_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x48000}, 0x10) 14:20:37 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='c\x00\x00A', @ANYRES16=0x0, @ANYBLOB="000429bd7000fddbdf250b00000005002a000100000008002b0006000000080032000600000008003c00110d000008002c000104000005002d00010000000500330002000000050038000000000008002c001e01000008802c0000000000"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 14:20:37 executing program 0: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:37 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 14:20:37 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f470c40020000000000200000000000"], 0xea, 0x0, &(0x7f0000000140)="bdf73bc62e8e40c098d6680e06565a5e6f230c4c8e5c697669ef04fd6cc2b4c8cef06aa89030e71df744190f8d92d01c2c3830cde93b45a5b029a6c1b164264c09e043e83fadb2e74011f2964ff881aa75929722d5390389d3ccb89e7661d56ce9ed07932c74870a9013af872b2657d1e639dd85ec0680be3dc4d6bbaa1782bf07b4d91ea10c727ad13b63d522b58501575ada9bd1acd011f50bb781f48d46eca20fb0a83eff747a5798fa8b87004f572a323db5d39d1fccb2b19b494a68fb5a06999471f344263ffbb79707f46b8797d90b064192acdb6ed42fca6a036966614ca3da041b2ac89fb7fe"}) read$snapshot(r1, 0x0, 0x0) 14:20:37 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000000)=""/10) r1 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x1002) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000001340)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001200)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/4096, 0x1000, 0x0, 0x27}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000001280)={0x0, 0x18, 0x40}}}], 0xef, 0x0, &(0x7f0000000100)="c04da54333a3d728147e64bc6128a7f08de8e41829810a6470a3a0effbb3a43c1fab785161d7712970903745b718a8cbf8ff05454507762e94f31d4b44ae9a0a0fe3d68df8033135a2547a756dee516e971bdc6166d0089e5787a583c6b7f1e726941e1d7b73e5ec3e1427ffb1c78b7df3a8928c756b242b18aafc8fe9bb244bef4c3b7f3d158f9b10aff7801403c0eb993e4be7c4c64cbd5e2da09a2f6ff26676e9e0f97c78342c63af99ef834b28ac2fda7cdaa67308ad54617572e64492f03cadf4da79e40f0b1bcb1e3331ab08a7d135b8abdcc0c1a3800e21b78a1ab3d86087d5fc075cf8a0f966d39e76c146"}) 14:20:37 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:20:37 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r1) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x30, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "0f6163a28c3e8f65a58c88450631f354"}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x8f}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044805}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 557.508562] binder: 14841:14850 unknown command 1074546447 14:20:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000055}, 0x4) r2 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000001300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000013c0)='\v'}) r3 = socket(0x28, 0xa, 0x5) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000280)={r4, 0x71, "68c8d467f6c5c0bd96564d471fa87bead3984a4ee8375cb779295ac75d43f9d22c7e2df2c715cf3eab9157445a18097e83b711e5331fb1f84f95b678de2f767757de5a4235034df1d91681c7f531cf9e17dfdf65095e2dd0dee9b3808ab2ba3822fe3eb1c661b0c832a00188b5bd1a0a70"}, &(0x7f0000000300)=0x79) 14:20:37 executing program 3: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x19c7e31b}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x10000}]}, 0x5c}}, 0x8000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, 0x0) 14:20:37 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="d4060000", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf251e000000880024800c0002000203aaaaaaaaaaaa0c0002000202aaaaaaaaaaaa0c0002000201aaaaaaaaaaaa08000100040000000800010009000000380003800c00050040ffffffffffffff080004000000010008000400010000000c00050008000000000000000c00050009000000000000000c00038008000400000200000c0002000200aaaaaaaaaaaa2800248008000100dc0000001c00038005000200030000000800010003000000050002000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB], 0xd4}}, 0x4000000) [ 557.549769] binder: 14841:14850 ioctl c0306201 20000080 returned -22 [ 557.588567] binder: 14841:14859 unknown command 1074546447 14:20:37 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r1) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 557.609982] binder: 14841:14859 ioctl c0306201 20000080 returned -22 14:20:37 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x200) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000040)=""/22) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, 0x0) 14:20:37 executing program 4: ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000240)=""/250) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:20:37 executing program 0: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x18, "b9cf1a42eeb6ccba6279b04f5fabfab71db61227c910724b"}, &(0x7f00000000c0)=0x20) 14:20:37 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000001300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000013c0)='\v'}) 14:20:37 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x40, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x24000003) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:20:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) connect$caif(r1, &(0x7f0000000040)=@util={0x25, "67c2708a9fec9801800000b070c784b0"}, 0x18) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) 14:20:37 executing program 0: ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f00000001c0)) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) personality(0x5000007) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) read$snapshot(r1, &(0x7f00000000c0)=""/236, 0xec) 14:20:37 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000001300)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x7, 0x1, 0x14}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/16, 0x10, 0x1, 0x24}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/229, 0xe5, 0x1, 0xf}}, &(0x7f0000000200)={0x0, 0x20, 0x48}}, 0x1000}], 0x1, 0x0, &(0x7f00000013c0)='\v'}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-vsock\x00', 0x2, 0x0) 14:20:38 executing program 3: getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x1000, "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"}, &(0x7f0000001040)=0x1008) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) 14:20:38 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x101}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="050027bd7000fedbdf250700002008000400ffffffffd60740a11a175388ba816e8812e6b58887519ed5cce005"], 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) 14:20:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000003c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, 0x0, 0x4010) 14:20:38 executing program 0: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000000c0)={r1, 0x28, "ab90f927c7b578d3eb326cfe2277c9568a2541ade6f0564a91528e2db6a647188b4da43c99e46c47"}, &(0x7f0000000140)=0x30) 14:20:38 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x2886}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x9, 0x0, 0x0, 0x1, r2}, &(0x7f0000000100)=0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000001300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000013c0)='\v'}) 14:20:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000003c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, 0x0, 0x4010) 14:20:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) 14:20:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r4, 0x500, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x4}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xf7}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xff}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00072cbd7000ffdbdf2404000000000006006272696467655ffb0d7549655f300000140006006261746164765f736c6176655f300000edf8d5fe388b29301dfc17cf10facf81e9de77b77d7c8d6a6f3acd8c2c565f59232730ecb762101085ab23976ab0bfd0cbd7c067c5aab316d01735276620bf9b7f10ff8a89ff678c1208d71c1e81141268af0757c6a7b46c925af97f1920ccc727c3c100529dd3538126f549084556a67360ea1ac35be27bcb7975287891ab248e8c2337adc0ce5bb8dbfb29d06e3a57d44ce94fec700c28af"], 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x4040081) 14:20:38 executing program 0: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000140)={{0x0, 0x2, 0x0, 0x0, 0x61}, 0x6, 0x3, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x1, 0x4, 0x3}) 14:20:38 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0)='802.15.4 MAC\x00', r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000810}, 0x5) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="10002dbd7000fedbdf252d00000006000400feff000008002c002c00000005002b000300001508000200", @ANYRES32=r5, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x4004800}, 0x40800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x100}, 0x40084) 14:20:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000003c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, 0x0, 0x4010) 14:20:38 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8000}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20000094) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000001300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000013c0)='\v'}) 14:20:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={r1, 0x9}, 0x8) 14:20:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:38 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000000)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:20:38 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000001300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000013c0)='\v'}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x8}, 0x8) 14:20:38 executing program 0: getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:38 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x10000090) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:20:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004042}, 0x4050) 14:20:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000003c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:38 executing program 2: setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x2}, 0x8) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x7}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000240)={0x9, 0x200, 0x3c, 0x9, r1}, &(0x7f0000000280)=0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000001300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe5e, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000013c0)='\v'}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, &(0x7f0000000300)={0x40, 0x6}) 14:20:38 executing program 5: ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f00000001c0)={{0x0, 0x2, 0xfffffffe, 0x2, 0xfffffff7}, 0x1, 0x705}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x80, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x4c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x80}, 0x1, 0x0, 0x0, 0x10000}, 0x1) 14:20:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000000)={0x5, 0x6, 0xfffa, 0x3}, 0x8) 14:20:38 executing program 0: syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:38 executing program 5: bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180), 0x4) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x24000004) 14:20:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000003c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:38 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440)='nl802154\x00', r2) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r3, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20048890) socket$caif_stream(0x25, 0x1, 0x5) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000f0000000c000600000000000000000005000f000000000008000300", @ANYRES32=r8, @ANYBLOB="864aaf9486fb87b9b976c6535486637413f56888598e3ded342ed174754af5f94a39ac7a0cde1e421f6df69498017ae619d4"], 0x30}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x178, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x6c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffff0000}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xd682}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7ff}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0x94, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_ID={0x54, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaae}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x28}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x101}]}, @NL802154_ATTR_SEC_DEVKEY={0x50, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x34}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8001}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x178}, 0x1, 0x0, 0x0, 0x20000030}, 0xc0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000003c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000196283dd00da795c29931e1c70587cc6847ea77f35b996caf0af74c4c149a3b2242be8ba982dbb63390a", @ANYRES16=r4, @ANYBLOB="010000000000000000000f0000000c000600000000000000000005000f000900000018000300", @ANYRES32=r10, @ANYBLOB], 0x30}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xfffffffffffffe03, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYRES64, @ANYRES32=r10, @ANYBLOB='\x00'/10], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x800) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240)='NLBL_UNLBL\x00', r9) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r11, @ANYBLOB="20002cbd7000fddbdf250200000014000200fe88000000000000000000000000010108000500e00000012100070073797374656d5f753a6f626a6563745f723a6c645f736f5f743a73300000000014000300fe8000000000000000000010000000bb2600070073797374656d5f753a6f626a6563745f723a6370755f6465766963655f743a7330000000140006006261746164763000000000000000000014000300fe8800000000f1dc166d4a625d2a00b0b6d3d99fdfb0c7a69362503c725337e9"], 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x4000801) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:20:38 executing program 2: sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x9c, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={[], [], @local}}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:event_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:ptchown_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x40015) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000001300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000013c0)='\v'}) 14:20:38 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x22, 0x6, 0x3) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x1000, "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"}, &(0x7f0000001040)=0x1008) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) 14:20:38 executing program 5: syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00', 0xffffffffffffffff) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/timer\x00', 0x12402) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYBLOB="020027bd7000fcdbdf250c00000008000b0001000080"], 0x1c}, 0x1, 0x0, 0x0, 0x2004c081}, 0x48000) 14:20:38 executing program 0: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:20:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000003c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:38 executing program 2: syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1002) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000001300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffde, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000013c0)='\v'}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000040)={0x5, 0x0, 0xa6e, 0x0, 0xd}) 14:20:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x240048c0}, 0x400000c1) 14:20:38 executing program 0: sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg2\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000140)=""/91, &(0x7f0000000000)=0x5b) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="4d000000250aba4ade15e3ed1fba6aeda596b8af0900b3cdf14dcdb2e0610edcc6c16d689fa4513b003dec269af73f471a9f8a6e9ff0271197e1f5b885489187ce06cbea0bd1dc6efaa3ad5657d7a30faf83ed6cdfdf30416454a98fae08513723"], &(0x7f00000001c0)=0x55) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000006c0)=ANY=[@ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000300)=0xf0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) read$snapshot(r2, 0x0, 0x56) 14:20:38 executing program 2: syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000001300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000013c0)='\v'}) 14:20:38 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x8004) 14:20:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000003c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:38 executing program 4: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, r0, 0x400, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4050}, 0x4005) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:20:38 executing program 3: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x4, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r0, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000240)={0xff, 0xff, 0x6, 0x7, 0x3, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1f, 0x9, 0x7f}, 0xe) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100)='nl802154\x00', 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x30, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_GET_INTERFACE(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000809000000ffdbdf25050000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="0c000600020000000000000008000300", @ANYRES32=r8, @ANYBLOB="0c000600030000000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="675cb1f44f9b0a23d54f700958eb5d2bc059f9ed42d21dd880a2f040c485b29b46c492c43a106f4e518f240a5026b8ea87a2497d9ed18ec3021100000000000000000000000000000066aa04dfd97fcef7d508ba8055000000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x4008040) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x4, @mcast2, 0x5}], 0x1c) 14:20:38 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000001300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000013c0)='\v'}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0x14, "bdecdef1ca02922937a29f08b7bb05bfa1622cbd"}, &(0x7f0000000040)=0x1c) 14:20:38 executing program 0: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000429bd7000fddbdf250300000008003b00070000000500370000000000050038000100000008003c00ff0100000800340008000000050038000100000008000300", @ANYRES32=0x0, @ANYBLOB="1e518b87c02d05b1adcb3e235dcfb093afa4f76fa3cff12eb25184d1263ad8c5effe890e01885e68ab069390d503f32c7cada1ea666f99090a0b0ce793044c347458c218a36cd9e5fc"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r2, 0x0, 0x0) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) 14:20:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000003c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:38 executing program 5: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000040)=0x8) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080), 0x4) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x48841}, 0xc000850) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r2) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r3, 0x4, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x24044004) 14:20:38 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000f9478cda1f29d89148ef71a84b4dbc1f8594a2fce0059c42c0fb169b97e33d74979cd8b0f2fbc32f08037037214dafd620e773d48ba94b97bf522b850fd773", @ANYRES16=0x0, @ANYBLOB="010026bd7000000000000f0000000c000600000000000000000005000f000000000008000300", @ANYRES32=r5, @ANYBLOB], 0x30}}, 0x20040800) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x88}, 0x40) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r8) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480)='nl802154\x00', r6) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r8, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x54589102}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r9, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r7, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r11, 0x1}, 0x14}}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r11, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x8000}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x6}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x9}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3ff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40004}, 0x8) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:20:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000003c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:38 executing program 2: getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="29000000a80f7909e226615c805b1c7ac4c72a2fddf447142f4526ae59c2b46cb2b75ab614e6a1b0a79ab1e68d"], &(0x7f0000000040)=0x31) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x2, 0xeb7, 0x0, 0x0, 0x80000003, 0x9, 0x0, 0x3, r0}, &(0x7f0000000100)=0x20) r1 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000001300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000013c0)='|'}) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f0000000140)=0x4) 14:20:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x7fffffe}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x28, 0x0, 0x200, 0x70bd29, 0x25dfdc03, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40008c0}, 0x20000890) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000001c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={[], [], @private=0xa010101}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'u:r:untrusted_app:s0:c512,c768\x00'}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:chfn_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_vlan\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4}, 0x4) 14:20:38 executing program 0: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) write$khugepaged_scan(r1, &(0x7f0000000040)='1000000\x00', 0x8) 14:20:38 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x9}, &(0x7f0000000040)=0x8) r3 = socket(0x3, 0x6, 0x3ff) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000080)={r2, @in={{0x2, 0x4e22, @multicast1}}}, &(0x7f0000000140)=0x84) write$UHID_INPUT(r0, 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r4, 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r5, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, 0x0, 0x0) 14:20:39 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:39 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x3c, 0x9}, 0x90) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x10001, @private1, 0x7ff}}, 0x3, 0x3}, &(0x7f0000000080)=0x90) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000200)={r3, 0x6a, "c0376c79a92903789c7a0068a425be1cdfb49f27f2d24c505e99e98637413c879bf21f00454487b9187a5b469846246466f913713838ded1ffd64a5b25db7b2d95514d7911c4109c04177d2ede1133d3c2d940c783f6d6c8df7dfd2b094b5c02d1af526811722e268175"}, &(0x7f00000000c0)=0x72) read$snapshot(r1, 0x0, 0x0) 14:20:39 executing program 2: ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000002c0), 0x4) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x5f4e80b8}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={r1, 0xffff}, 0x8) r2 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r3, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001440)={0xa0, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x8, 0x0, 0x21}, @fd={0x66642a85, 0x0, r3}, @fd}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x1000}, @acquire={0x40046305, 0x3}], 0x1, 0x0, &(0x7f00000013c0)='\v'}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f0000000300)={{0x3, 0x2, 0x3, 0x2, 0x38}, 0x1}) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000280)={r1, 0x2}, 0x8) 14:20:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x30}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x30, r8, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x64, r2, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x7}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x1}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x8000}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0xaa2}]}, 0x64}, 0x1, 0x0, 0x0, 0x8800}, 0x100) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:20:39 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:39 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) 14:20:39 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000001300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000013c0)='\v'}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7d}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvlan0\x00'}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004001}, 0x10) 14:20:39 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0xa8, 0x0, &(0x7f0000000200)=[@acquire_done={0x40106309, 0x2}, @register_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0x9}, @fda={0x66646185, 0x4, 0x2, 0x12}, @flat=@binder={0x73622a85, 0x3015, 0x3}}, &(0x7f0000000000)={0x0, 0x20, 0x40}}}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r1}, @flat, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x55, 0x0, &(0x7f00000002c0)="d020ab2eaf26a0376a315d63679c68c86bd5eea0d200436838cf9d15a0a034b21ba475461be049c6b740c2ad570a52984f6c52bb827f9d5dfcb586410b7c16651b932f5a5237c774941cd9e39b6e4a74898f9d657e"}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socket(0x1d, 0x2, 0x6) read$snapshot(r2, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) 14:20:39 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:39 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r3, 0x400, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x80) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x401}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x621d9a07}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x610}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x106611d1d0334ba7}, 0x842) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x300, 0x7fff, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20008800}, 0x14000004) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3f}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}]}, @NL802154_ATTR_SEC_LEVEL={0x54, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8b}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x40}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x80}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x9c}}, 0x10) 14:20:39 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, 0x0) [ 559.110075] can: request_module (can-proto-6) failed. 14:20:39 executing program 2: syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0)='batadv\x00', r0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x3, @loopback, 0x7}}, 0x7, 0x5}, &(0x7f0000000280)=0x90) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/timer\x00', 0xc8200) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/timer\x00', 0x10a00) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000480)={0x3, 0x0, 0xd26, 0x1, 0x5}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x98, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x1, 0x0, 0x28}, @flat=@binder={0x73622a85, 0x0, 0x1}}, &(0x7f0000000080)={0x0, 0x18, 0x38}}, 0x400}], 0x1, 0x0, &(0x7f00000013c0)='\v'}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r3, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000002c0), &(0x7f0000000300)=0x4) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) [ 559.138668] can: request_module (can-proto-6) failed. 14:20:39 executing program 0: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r3 = getuid() ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="9f3000000800000085000000160000003360ffff1000000085100000ffffffff182b0000", @ANYRES32=0x1, @ANYBLOB="00000000060000008fdb0800fcffffff18330000040000000000cc9050001000000018300000050000000066301746de74bca1da68447dd86c6fa20000000000000000000000000012fd1f9b379bd83ec9a1206aec3acdaa4edfd588154a76d1d73993d9254f8223d814224e7edb3a50c97e263ec56edcd1438100001900000000fe2c127ce87d12a097a0c238a0309008009a4b5c9504e8144224f6172eda88e8bb91dc3ed440173e4388cc452324077f3a76867bf9bfcb244e2a8a8e876d0459ce58e07509"], &(0x7f0000000140)='GPL\x00', 0x8001, 0x0, &(0x7f0000000180), 0x41000, 0x0, [], r4, 0x1b, r1, 0x8, &(0x7f0000000200)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x7, 0x7f, 0x400}, 0x10, 0xffffffffffffffff}, 0x78) setreuid(r3, 0xee00) write$UHID_INPUT(r2, 0x0, 0x0) getuid() setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000040)=0x8, 0x4) write$UHID_INPUT(r1, 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/timer\x00', 0xc080) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000000480)={{0xffffffffffffffff, 0x3, 0x4, 0x3, 0x8}, 0x3f, 0xff, 'id1\x00', 'timer0\x00', 0x0, 0x1, 0x0, 0x4, 0x1}) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) read$snapshot(r0, 0x0, 0x0) 14:20:39 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000140)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r3) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r2, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x2000c000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="9258d9a2d33b8abce0b833bc6d313110c05f4ce15a1f0412661180f124280e85addacf671bf3137fd0400aba9db6792b379c74a391de01a800646f034bddca7b7ba218a335bff37babb5cb7ddac361ba50f5ed3d0a6a83db3b5f29ed2a", @ANYRESHEX, @ANYBLOB="200025bd7000fcdbdf251900000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1c009) 14:20:39 executing program 4: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:20:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0xa, 0x2, 0x9) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x51}, 0x8) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) 14:20:39 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:39 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000001300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000013c0)='\v'}) r1 = socket(0xb, 0x800, 0x3f) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 14:20:39 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x30}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r7) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0)='nl802154\x00', 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x30, r8, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x40, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}}, 0x80) 14:20:39 executing program 0: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) 14:20:39 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000040)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x16, 0x0, &(0x7f0000000000)="4f8602a3beb419648dde3b33720000008000000000af"}) 14:20:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240)='nl802154\x00', r0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x2400c014) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x58}}, 0x10) 14:20:39 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000080)=0x7, 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) 14:20:39 executing program 0: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) read$snapshot(r0, 0x0, 0xfffffffffffffe31) 14:20:39 executing program 4: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:20:39 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000001300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000013c0)='\v'}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4e0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000040)='GPL\x00', 0x19, 0xdf, &(0x7f0000000100)=""/223, 0x41000, 0xc, [], 0x0, 0x0, r1, 0x8, &(0x7f0000000080)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0xe, 0xffffffd6, 0x8}, 0x10}, 0x78) 14:20:39 executing program 0: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) read$snapshot(r0, 0x0, 0x0) 14:20:39 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:39 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket(0x2a, 0x1, 0x3) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000)=0x6, 0x4) 14:20:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000f0000000c000600000000000000000005000f000000000008000300", @ANYRES32=r5, @ANYBLOB="cb7d3f8ae4b16f5429b3cd2d8bd8a174b01145c804d2948478022e718e35c4b86f2285d480d590973fe2b53cd7d96aa3ea754ccef161b77d17affb56d0ac0b831d876387b2208776df39f9"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x54, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x2040014}, 0x2000c881) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:20:39 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4044080) 14:20:39 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000001300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000013c0)='\v'}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) 14:20:39 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:39 executing program 0: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 14:20:39 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000002ff55693896626b2afa00d7776c717c2b384e6f39d7337904ed8b7846b2b1f525a90c31ce680545a3dad574955ac622a025cb8fc685bda2e96f016ebbb3dee7c7cfd74606687e03863d49381b60764e1013dac480a65d880f385838c68517f197ff2832faeca636ee547b4dc33c9ccbbbf89add3c6128a5f83f97d577ff2d11e085d88b1faadb2ec8747a70923bb5f27403a36a6c3f520aa284d01596c1529897184cc28656c456607b9594abfd0e13fb67f895c7a6572c02799b7637c555238ade541465bd250a16b7b9fc35eb199f661559c0a307124a09a97e8f8346d72bacc184b434aeba467654154230226c203", @ANYRES16=0x0, @ANYBLOB="5b6525bd7000fcdbdf251c0000000c00060003000000000000000c0006000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4040884) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000001300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000013c0)='\v'}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000001c0)={r2, 0xffffffff}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={r2, 0x7}, 0x8) 14:20:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x5d8}, 0x8) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1) 14:20:39 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:20:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc00c084}, 0x0) 14:20:40 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4010) 14:20:40 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000040)={0xfffffffffffffffe, 0x2f, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x14) 14:20:40 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000001300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000013c0)='\v'}) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01000000000000000033f20000a7"], 0x14}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r2, @ANYBLOB="000425bd7000fddbdf251b000000100023800c0004000202aa02000000aa100023800c0004000201aaaaaaaaaaaa100023800c0004000201aaaaaaaaaaaa100023800c000400031aaaaaaaaaaaaa100023802400045125abec238ddc83877c0000000000000000000c00060002000000000000001000238002aaaaaaaaaaaa100023800c0004000200aaaaaaaaaaaa100023800cb9b1170b03aaaaaaaaaaaa10006922e2af"], 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x80000) r3 = socket(0xf, 0xa, 0x81) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0xbf, 0xfffe, 0x200, 0x2, 0x2, 0x3, 0x5, 0x9, 0x0}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000000c0)={0xb2, 0x8002, 0x7, 0x2, r4}, &(0x7f0000000100)=0x10) socket$caif_stream(0x25, 0x1, 0x0) 14:20:40 executing program 0: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2cd9}, &(0x7f0000000080)=0x8) read$snapshot(r0, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r1, 0x6, 0x6d1}, &(0x7f0000000140)=0xc) 14:20:40 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000001040)=0x1, 0x4) socket$l2tp6(0xa, 0x2, 0x73) shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000040)=""/4096) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000000)=0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001080)=[@in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e23, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfff}, @in={0x2, 0x4e20, @remote}], 0x3c) 14:20:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000000)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x74e633c8fe6a334a}, 0x20008041) [ 559.922372] kasan: CONFIG_KASAN_INLINE enabled 14:20:40 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f0000000240)={&(0x7f0000000180), 0x7, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x0, 0x12, 0x70bd29, 0x25dfdbfc}, 0x40}, 0x1, 0x0, 0x0, 0x48010}, 0x4000) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x4}]}, 0x1c}}, 0x20000001) [ 559.944477] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 559.981202] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 559.987486] Modules linked in: 14:20:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x38, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c090}, 0x48c0) 14:20:40 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000000)={0x0}}, 0x0) [ 559.990681] CPU: 0 PID: 15250 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 559.998559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 560.007919] task: ffff88808c08c440 task.stack: ffff888073a88000 [ 560.013985] RIP: 0010:nl802154_del_llsec_dev+0x13b/0x2e0 [ 560.019433] RSP: 0018:ffff888073a8f6e0 EFLAGS: 00010246 [ 560.024882] RAX: dffffc0000000000 RBX: ffff88823a0f0080 RCX: 0000000000000000 [ 560.032152] RDX: 0000000000000000 RSI: ffffffff86dab015 RDI: ffff88823a0f0198 14:20:40 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x20004885) [ 560.039424] RBP: 1ffff1100e751ede R08: 0000000000000001 R09: ffff888073a8f990 [ 560.046700] R10: ffff888073a8f6af R11: ffff88808c08c440 R12: ffff8882382a7440 [ 560.053999] R13: ffff8880abac0f90 R14: ffffffff886f38a0 R15: ffff8880a3aa2040 [ 560.061266] FS: 00007f73f39c8700(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000 [ 560.069685] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 560.075563] CR2: 0000000000970004 CR3: 00000000a3640000 CR4: 00000000001406f0 [ 560.082865] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 560.090142] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 560.097418] Call Trace: [ 560.100008] ? nl802154_del_llsec_key+0x2f0/0x2f0 [ 560.106341] ? validate_nla+0x192/0x5e0 [ 560.110323] ? nl802154_dump_wpan_phy_done+0x40/0x40 [ 560.115428] ? nla_parse+0x157/0x1f0 [ 560.119145] ? nl802154_dump_wpan_phy_done+0x40/0x40 [ 560.124254] genl_family_rcv_msg+0x572/0xb20 [ 560.128669] ? genl_rcv+0x40/0x40 [ 560.132129] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 560.137610] ? trace_hardirqs_on+0x10/0x10 [ 560.141841] ? sock_sendmsg+0xb5/0x100 [ 560.145728] genl_rcv_msg+0xaf/0x140 [ 560.149439] netlink_rcv_skb+0x125/0x390 [ 560.153488] ? genl_family_rcv_msg+0xb20/0xb20 [ 560.158077] ? netlink_ack+0x9a0/0x9a0 [ 560.161944] ? lock_acquire+0x170/0x3f0 [ 560.165917] genl_rcv+0x24/0x40 [ 560.169188] netlink_unicast+0x437/0x610 [ 560.173256] ? netlink_sendskb+0xd0/0xd0 [ 560.177295] ? __check_object_size+0x179/0x230 [ 560.181858] netlink_sendmsg+0x62e/0xb80 [ 560.185913] ? nlmsg_notify+0x170/0x170 [ 560.189962] ? kernel_recvmsg+0x210/0x210 [ 560.194113] ? security_socket_sendmsg+0x83/0xb0 [ 560.198854] ? nlmsg_notify+0x170/0x170 [ 560.202806] sock_sendmsg+0xb5/0x100 [ 560.206508] ___sys_sendmsg+0x6c8/0x800 [ 560.210475] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 560.215228] ? do_futex+0x12b/0x1570 [ 560.218922] ? __fget+0x1fe/0x360 [ 560.222372] ? lock_acquire+0x170/0x3f0 [ 560.226441] ? lock_downgrade+0x740/0x740 [ 560.230573] ? __fget+0x225/0x360 [ 560.234005] ? __fdget+0x196/0x1f0 [ 560.237526] ? sockfd_lookup_light+0xb2/0x160 [ 560.242014] __sys_sendmsg+0xa3/0x120 [ 560.245805] ? SyS_shutdown+0x160/0x160 [ 560.249764] ? security_file_ioctl+0x83/0xb0 [ 560.254167] ? fput+0xb/0x140 [ 560.257255] SyS_sendmsg+0x27/0x40 [ 560.260782] ? __sys_sendmsg+0x120/0x120 [ 560.264831] do_syscall_64+0x1d5/0x640 [ 560.268710] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 560.273912] RIP: 0033:0x466459 [ 560.277107] RSP: 002b:00007f73f39c8188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 560.284831] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 560.292195] RDX: 0000000000004010 RSI: 0000000020000280 RDI: 0000000000000004 [ 560.299449] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 560.306718] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 560.313971] R13: 00007fff1cce35bf R14: 00007f73f39c8300 R15: 0000000000022000 [ 560.321233] Code: 00 00 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 96 01 00 00 48 8b 93 18 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 d1 48 c1 e9 03 <0f> b6 0c 01 48 89 d0 83 e0 07 83 c0 01 38 c8 7c 08 84 c9 0f 85 14:20:40 executing program 0: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) accept4$alg(r0, 0x0, 0x0, 0x80000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x30, 0x0, &(0x7f0000000080)=[@dead_binder_done, @increfs={0x40046304, 0x2}, @clear_death, @free_buffer], 0x11, 0x0, &(0x7f00000002c0)="e1bc78dc13dc2c5abe25727917bb319f6d"}) read$snapshot(r0, 0x0, 0x0) 14:20:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) accept4$alg(r2, 0x0, 0x0, 0x0) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000040)=0x8001, 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="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", 0x1000) [ 560.340330] RIP: nl802154_del_llsec_dev+0x13b/0x2e0 RSP: ffff888073a8f6e0 [ 560.350915] ---[ end trace b1c62b746c4d6b80 ]--- [ 560.357917] Kernel panic - not syncing: Fatal exception [ 560.363770] Kernel Offset: disabled [ 560.367407] Rebooting in 86400 seconds..