ady
[ 1526.089463] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1526.097442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1526.113642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1526.128153] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[ 1526.138394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1526.149619] 8021q: adding VLAN 0 to HW filter on device batadv0
09:24:51 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x6, 0x0, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:24:51 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080))

09:24:51 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x100000000000000}}}], 0xffffff76)

09:24:51 executing program 4:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x8000, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000080))

09:24:51 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1409980000000000]})

09:24:51 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x00\x00\x00 '], 0x0, 0x0, 0x0})

[ 1526.267697] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1526.278265] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:24:51 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080))

09:24:51 executing program 4:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x8000, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000080))

[ 1526.329535] Sensor A: =================  START STATUS  =================
[ 1526.354846] binder_transaction: 3 callbacks suppressed
[ 1526.354855] binder: 26642:26643 got transaction with invalid data ptr
[ 1526.372626] Sensor A: Test Pattern: 75% Colorbar
[ 1526.377455] Sensor A: Vertical Flip: false
[ 1526.418649] binder_transaction: 3 callbacks suppressed
[ 1526.418667] binder: 26642:26643 transaction failed 29201/-14, size 8192-0 line 3053
[ 1526.454214] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1526.463241] Sensor A: Horizontal Flip: false
09:24:51 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x200000000000000}}}], 0xffffff76)

09:24:51 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x7, 0x0, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1526.488593] Sensor A: Brightness: 128
09:24:51 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00 '], 0x0, 0x0, 0x0})

[ 1526.526020] binder: undelivered TRANSACTION_ERROR: 29201
[ 1526.568626] Sensor A: Contrast: 128
[ 1526.600864] Sensor A: Hue: 0
09:24:51 executing program 4:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x8000, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000080))

[ 1526.633709] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:24:51 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080))

[ 1526.690877] binder: 26676:26677 got transaction with invalid data ptr
[ 1526.702754] Sensor A: Saturation: 128
[ 1526.706807] Sensor A: ==================  END STATUS  ==================
09:24:51 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x60, 0x0, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:24:51 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x400000000000000}}}], 0xffffff76)

[ 1526.752987] binder: 26676:26677 transaction failed 29201/-14, size 8192-0 line 3053
09:24:51 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1509980000000000]})

09:24:51 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080))

09:24:51 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x9, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000240)=0x1, 0x4)
ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58)
r2 = accept4(r0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00')
sendmsg$FOU_CMD_DEL(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x11100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x300, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0xbf}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x4000000)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_GET_STATUS64(r4, 0x4c05, 0x0)
ioctl$BLKFRASET(r4, 0x1264, &(0x7f00000001c0)=0xfffffffffffffffe)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80000, 0x100)
ioctl$TIOCMBIC(r5, 0x5417, &(0x7f0000000180)=0x8)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
sendfile(r2, r6, &(0x7f00000002c0), 0x1000007ffff000)
syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x8000)

[ 1526.900891] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1526.936324] Sensor A: =================  START STATUS  =================
09:24:51 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z\x00\x00\x00 '], 0x0, 0x0, 0x0})

09:24:51 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x300, 0x0, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1526.945082] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1526.955113] binder: undelivered TRANSACTION_ERROR: 29201
[ 1526.977660] Sensor A: Test Pattern: 75% Colorbar
09:24:51 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x500000000000000}}}], 0xffffff76)

[ 1527.028484] Sensor A: Vertical Flip: false
[ 1527.088232] Sensor A: Horizontal Flip: false
[ 1527.115999] Sensor A: Brightness: 128
[ 1527.121534] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1527.128275] binder: 26723:26724 got transaction with invalid data ptr
[ 1527.153164] Sensor A: Contrast: 128
09:24:52 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080))

[ 1527.168907] Sensor A: Hue: 0
[ 1527.185362] binder: 26723:26724 transaction failed 29201/-14, size 8192-0 line 3053
[ 1527.200779] Sensor A: Saturation: 128
09:24:52 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x800000000000000}}}], 0xffffff76)

[ 1527.216330] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1527.256006] Sensor A: ==================  END STATUS  ==================
09:24:52 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080))

[ 1527.298547] Sensor A: =================  START STATUS  =================
09:24:52 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x500, 0x0, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:24:52 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080))

09:24:52 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000000010020"], 0x0, 0x0, 0x0})

[ 1527.383014] Sensor A: Test Pattern: 75% Colorbar
[ 1527.426985] binder: undelivered TRANSACTION_ERROR: 29201
[ 1527.464145] Sensor A: Vertical Flip: false
[ 1527.471280] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1527.503451] Sensor A: Horizontal Flip: false
[ 1527.507887] Sensor A: Brightness: 128
[ 1527.511702] Sensor A: Contrast: 128
[ 1527.547458] binder: 26749:26755 transaction failed 29189/-22, size 8192-0 line 2896
[ 1527.565059] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1527.576060] Sensor A: Hue: 0
[ 1527.579190] Sensor A: Saturation: 128
[ 1527.592943] Sensor A: ==================  END STATUS  ==================
09:24:52 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ffffffffffffff]})

09:24:52 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x1e00000000000000}}}], 0xffffff76)

09:24:52 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x10000, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000300), 0x4)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0xa, 0xffd)
connect$inet(r0, &(0x7f0000000580)={0x2, 0x4e20, @remote}, 0x10)
r2 = semget(0x2, 0x1, 0x20)
semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000680)=""/144)
mknod$loop(&(0x7f0000000640)='./file0\x00', 0x2, 0x1)
r3 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x80000001, 0x1)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000340)={0x0, 0x9, 0x200, 0x0, 0x8, 0x8001, 0x4, 0x10001, 0xc04, 0xfffffffffffffffb, 0xff}, 0xb)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x24, 0x2, 0x3}, 0x10)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x8000, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x105082)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, 0x0, 0xfffffffffffffcf5)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x1)
getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000240)=0xb)
fanotify_mark(r3, 0x2, 0x5f5b0fc457bcba65, 0xffffffffffffffff, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in=@loopback, @in6=@loopback}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000500)=0xc)
r6 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1)
setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f00000004c0)='/dev/loop#\x00', 0xb, 0x1)
ioctl$PIO_CMAP(r4, 0x4b71, &(0x7f00000003c0)={0x1, 0x1, 0x8, 0x8, 0x20, 0xfff})
pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000540)=""/51)
sendfile(r5, r5, &(0x7f0000000280)=0x1c00, 0x102004835)

09:24:52 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x600, 0x0, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1527.659904] binder: undelivered TRANSACTION_ERROR: 29189
09:24:52 executing program 0:
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080))

09:24:52 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000000020020"], 0x0, 0x0, 0x0})

[ 1527.743028] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1527.780878] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:24:52 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x700, 0x0, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1527.786237] binder: 26773:26775 got transaction with invalid data ptr
[ 1527.805524] Sensor A: =================  START STATUS  =================
[ 1527.847546] binder: 26773:26775 transaction failed 29201/-14, size 8192-0 line 3053
[ 1527.870044] Sensor A: Test Pattern: 75% Colorbar
09:24:52 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x1f00000000000000}}}], 0xffffff76)

09:24:52 executing program 0:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080))

[ 1527.911945] Sensor A: Vertical Flip: false
[ 1527.920315] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1527.942694] Sensor A: Horizontal Flip: false
[ 1527.966248] Sensor A: Brightness: 128
09:24:52 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000000030020"], 0x0, 0x0, 0x0})

[ 1527.989043] Sensor A: Contrast: 128
[ 1527.998950] binder: undelivered TRANSACTION_ERROR: 29201
[ 1528.023374] Sensor A: Hue: 0
[ 1528.044651] Sensor A: Saturation: 128
[ 1528.071094] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1528.072893] Sensor A: ==================  END STATUS  ==================
09:24:53 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x2000000000000000}}}], 0xffffff76)

[ 1528.116283] binder: 26804:26805 got transaction with invalid data ptr
[ 1528.150595] binder: 26804:26805 transaction failed 29201/-14, size 8192-0 line 3053
[ 1528.159854] Sensor A: =================  START STATUS  =================
[ 1528.177632] Sensor A: Test Pattern: 75% Colorbar
09:24:53 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x2000, 0x0, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1528.199965] Sensor A: Vertical Flip: false
[ 1528.215337] Sensor A: Horizontal Flip: false
[ 1528.273566] binder: undelivered TRANSACTION_ERROR: 29201
[ 1528.292032] Sensor A: Brightness: 128
[ 1528.309481] Sensor A: Contrast: 128
[ 1528.326437] Sensor A: Hue: 0
[ 1528.329562] Sensor A: Saturation: 128
[ 1528.347510] Sensor A: ==================  END STATUS  ==================
[ 1528.361858] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:24:53 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]})

09:24:53 executing program 0:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080))

09:24:53 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000000040020"], 0x0, 0x0, 0x0})

09:24:53 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x2100000000000000}}}], 0xffffff76)

09:24:53 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x10000, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000300), 0x4)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0xa, 0xffd)
connect$inet(r0, &(0x7f0000000580)={0x2, 0x4e20, @remote}, 0x10)
r2 = semget(0x2, 0x1, 0x20)
semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000680)=""/144)
mknod$loop(&(0x7f0000000640)='./file0\x00', 0x2, 0x1)
r3 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x80000001, 0x1)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000340)={0x0, 0x9, 0x200, 0x0, 0x8, 0x8001, 0x4, 0x10001, 0xc04, 0xfffffffffffffffb, 0xff}, 0xb)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x24, 0x2, 0x3}, 0x10)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x8000, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x105082)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, 0x0, 0xfffffffffffffcf5)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x1)
getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000240)=0xb)
fanotify_mark(r3, 0x2, 0x5f5b0fc457bcba65, 0xffffffffffffffff, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in=@loopback, @in6=@loopback}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000500)=0xc)
r6 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1)
setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f00000004c0)='/dev/loop#\x00', 0xb, 0x1)
ioctl$PIO_CMAP(r4, 0x4b71, &(0x7f00000003c0)={0x1, 0x1, 0x8, 0x8, 0x20, 0xfff})
pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000540)=""/51)
sendfile(r5, r5, &(0x7f0000000280)=0x1c00, 0x102004835)

09:24:53 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x3f00, 0x0, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1528.395470] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1528.493182] binder: 26829:26834 got transaction with invalid data ptr
[ 1528.499930] binder: 26829:26834 transaction failed 29201/-14, size 8192-0 line 3053
[ 1528.531855] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:24:53 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x4000, 0x0, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1528.555503] Sensor A: =================  START STATUS  =================
[ 1528.563486] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1528.603914] Sensor A: Test Pattern: 75% Colorbar
09:24:53 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x2200000000000000}}}], 0xffffff76)

[ 1528.630543] Sensor A: Vertical Flip: false
09:24:53 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000000050020"], 0x0, 0x0, 0x0})

[ 1528.654475] binder: undelivered TRANSACTION_ERROR: 29201
[ 1528.700631] Sensor A: Horizontal Flip: false
[ 1528.725543] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1528.741287] Sensor A: Brightness: 128
09:24:53 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(0x0, 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080))

[ 1528.771650] binder: 26858:26859 got transaction with invalid data ptr
[ 1528.779802] Sensor A: Contrast: 128
[ 1528.800537] Sensor A: Hue: 0
[ 1528.816823] Sensor A: Saturation: 128
09:24:53 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080))

[ 1528.823296] binder: 26858:26859 transaction failed 29201/-14, size 8192-0 line 3053
[ 1528.841213] Sensor A: ==================  END STATUS  ==================
09:24:53 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x2300000000000000}}}], 0xffffff76)

[ 1528.896291] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1528.992253] binder: undelivered TRANSACTION_ERROR: 29201
09:24:53 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000000060020"], 0x0, 0x0, 0x0})

09:24:53 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffffffffffff]})

09:24:53 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080))

09:24:54 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x6000, 0x0, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1529.099216] binder: 26878:26879 got transaction with invalid data ptr
[ 1529.113593] Sensor A: =================  START STATUS  =================
[ 1529.134769] binder: 26878:26879 transaction failed 29201/-14, size 8192-0 line 3053
[ 1529.141258] Sensor A: Test Pattern: 75% Colorbar
[ 1529.147559] Sensor A: Vertical Flip: false
[ 1529.151811] Sensor A: Horizontal Flip: false
09:24:54 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x10000, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000300), 0x4)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0xa, 0xffd)
connect$inet(r0, &(0x7f0000000580)={0x2, 0x4e20, @remote}, 0x10)
r2 = semget(0x2, 0x1, 0x20)
semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000680)=""/144)
mknod$loop(&(0x7f0000000640)='./file0\x00', 0x2, 0x1)
r3 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x80000001, 0x1)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000340)={0x0, 0x9, 0x200, 0x0, 0x8, 0x8001, 0x4, 0x10001, 0xc04, 0xfffffffffffffffb, 0xff}, 0xb)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x24, 0x2, 0x3}, 0x10)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x8000, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x105082)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, 0x0, 0xfffffffffffffcf5)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x1)
getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000240)=0xb)
fanotify_mark(r3, 0x2, 0x5f5b0fc457bcba65, 0xffffffffffffffff, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in=@loopback, @in6=@loopback}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000500)=0xc)
r6 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1)
setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f00000004c0)='/dev/loop#\x00', 0xb, 0x1)
ioctl$PIO_CMAP(r4, 0x4b71, &(0x7f00000003c0)={0x1, 0x1, 0x8, 0x8, 0x20, 0xfff})
pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000540)=""/51)
sendfile(r5, r5, &(0x7f0000000280)=0x1c00, 0x102004835)

09:24:54 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x2400000000000000}}}], 0xffffff76)

09:24:54 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00 '], 0x0, 0x0, 0x0})

[ 1529.204458] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1529.232758] Sensor A: Brightness: 128
[ 1529.236591] Sensor A: Contrast: 128
[ 1529.245353] binder: undelivered TRANSACTION_ERROR: 29201
[ 1529.282522] Sensor A: Hue: 0
[ 1529.305873] Sensor A: Saturation: 128
[ 1529.325595] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1529.338770] Sensor A: ==================  END STATUS  ==================
09:24:54 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080))

[ 1529.356419] binder: 26904:26906 got transaction with invalid data ptr
[ 1529.381405] Sensor A: =================  START STATUS  =================
09:24:54 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x2600000000000000}}}], 0xffffff76)

[ 1529.405270] Sensor A: Test Pattern: 75% Colorbar
[ 1529.419377] binder: 26904:26906 transaction failed 29201/-14, size 8192-0 line 3053
09:24:54 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, 0x0, 0x0)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080))

[ 1529.473608] Sensor A: Vertical Flip: false
[ 1529.477886] Sensor A: Horizontal Flip: false
[ 1529.482309] Sensor A: Brightness: 128
[ 1529.482326] Sensor A: Contrast: 128
[ 1529.482341] Sensor A: Hue: 0
[ 1529.482355] Sensor A: Saturation: 128
09:24:54 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00 '], 0x0, 0x0, 0x0})

09:24:54 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0xff00, 0x0, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1529.570015] binder: undelivered TRANSACTION_ERROR: 29201
[ 1529.606895] Sensor A: ==================  END STATUS  ==================
09:24:54 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x95ffffff00000000}}}], 0xffffff76)

[ 1529.677234] binder: 26928:26933 got transaction with invalid data ptr
[ 1529.700037] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:24:54 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdfd]})

09:24:54 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, 0x0, 0x0)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080))

09:24:54 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, 0x0, 0x0)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080))

[ 1529.804682] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1529.888619] Sensor A: =================  START STATUS  =================
[ 1529.927043] Sensor A: Test Pattern: 75% Colorbar
[ 1529.947833] binder: undelivered TRANSACTION_ERROR: 29201
[ 1529.957251] Sensor A: Vertical Flip: false
[ 1529.975037] Sensor A: Horizontal Flip: false
[ 1529.996296] Sensor A: Brightness: 128
[ 1530.008520] Sensor A: Contrast: 128
[ 1530.016895] Sensor A: Hue: 0
[ 1530.039925] Sensor A: Saturation: 128
[ 1530.057764] Sensor A: ==================  END STATUS  ==================
[ 1530.079704] Sensor A: =================  START STATUS  =================
09:24:55 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x10000, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000300), 0x4)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0xa, 0xffd)
connect$inet(r0, &(0x7f0000000580)={0x2, 0x4e20, @remote}, 0x10)
r2 = semget(0x2, 0x1, 0x20)
semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000680)=""/144)
mknod$loop(&(0x7f0000000640)='./file0\x00', 0x2, 0x1)
r3 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x80000001, 0x1)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000340)={0x0, 0x9, 0x200, 0x0, 0x8, 0x8001, 0x4, 0x10001, 0xc04, 0xfffffffffffffffb, 0xff}, 0xb)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x24, 0x2, 0x3}, 0x10)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x8000, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x105082)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, 0x0, 0xfffffffffffffcf5)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x1)
getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000240)=0xb)
fanotify_mark(r3, 0x2, 0x5f5b0fc457bcba65, 0xffffffffffffffff, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in=@loopback, @in6=@loopback}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000500)=0xc)
r6 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1)
setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f00000004c0)='/dev/loop#\x00', 0xb, 0x1)
ioctl$PIO_CMAP(r4, 0x4b71, &(0x7f00000003c0)={0x1, 0x1, 0x8, 0x8, 0x20, 0xfff})
pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000540)=""/51)
sendfile(r5, r5, &(0x7f0000000280)=0x1c00, 0x102004835)

09:24:55 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x1000000, 0x0, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:24:55 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000000120020"], 0x0, 0x0, 0x0})

09:24:55 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0xbf00000000000000}}}], 0xffffff76)

09:24:55 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[], 0x0)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080))

[ 1530.103090] Sensor A: Test Pattern: 75% Colorbar
[ 1530.113668] Sensor A: Vertical Flip: false
[ 1530.126191] Sensor A: Horizontal Flip: false
[ 1530.135437] Sensor A: Brightness: 128
[ 1530.144131] Sensor A: Contrast: 128
[ 1530.162706] Sensor A: Hue: 0
[ 1530.165897] Sensor A: Saturation: 128
[ 1530.192947] Sensor A: ==================  END STATUS  ==================
[ 1530.205538] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:24:55 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe7]})

09:24:55 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0xf401000000000000}}}], 0xffffff76)

[ 1530.274662] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:24:55 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[], 0x0)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080))

09:24:55 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00 '], 0x0, 0x0, 0x0})

09:24:55 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x2000000, 0x0, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:24:55 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[], 0x0)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080))

[ 1530.390194] binder: undelivered TRANSACTION_ERROR: 29201
[ 1530.413290] Sensor A: =================  START STATUS  =================
[ 1530.490351] Sensor A: Test Pattern: 75% Colorbar
[ 1530.524866] Sensor A: Vertical Flip: false
[ 1530.541640] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1530.543776] Sensor A: Horizontal Flip: false
09:24:55 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x3000000, 0x0, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1530.599977] Sensor A: Brightness: 128
[ 1530.612754] Sensor A: Contrast: 128
[ 1530.629661] Sensor A: Hue: 0
[ 1530.681734] Sensor A: Saturation: 128
[ 1530.702642] Sensor A: ==================  END STATUS  ==================
[ 1530.721874] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:24:55 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00 '], 0x0, 0x0, 0x0})

09:24:55 executing program 4:
r0 = socket$kcm(0x10, 0xfffffffffffffffd, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001540)="2e000000110081aee405d10200000e00fa076b000a00000000f3ff500befccd77f00000000081c5eda00b0eba06a", 0x2e}], 0x1}, 0x0)

09:24:55 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080))

09:24:55 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0xfdffffff00000000}}}], 0xffffff76)

09:24:55 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x4000000, 0x0, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:24:55 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]})

09:24:55 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080))

[ 1530.882021] Sensor A: =================  START STATUS  =================
[ 1530.901598] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1530.925302] Sensor A: Test Pattern: 75% Colorbar
[ 1530.983764] Sensor A: Vertical Flip: false
[ 1530.989098] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1531.009170] Sensor A: Horizontal Flip: false
09:24:55 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080))

09:24:55 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00 '], 0x0, 0x0, 0x0})

09:24:55 executing program 4:
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="5d92efdf6644c3f88f4acc0f9af8")
socket$inet(0x2, 0x6000000000000003, 0x6)
r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x80000000, 0x200000)
ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f00000000c0))
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0x3b028fb06411ad30, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0)
pipe2(&(0x7f0000000100)={<r1=>0xffffffffffffffff}, 0x84000)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', r1}, 0x10)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffe)
ioctl(r2, 0x6, &(0x7f0000000080)="0a5cc80700315f85715070")
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x100000000, 0x4)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000880)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100a27f03cb723ee59700c000ffa1812491722194ffff7f00000000080000"])
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000880)}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40485404, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x3}})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00')
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r7, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000300)=@sack_info={<r9=>0x0, 0x5, 0x7}, &(0x7f0000000340)=0xc)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000380)={r9, 0x1ff, 0x8, 0x401, 0x1ff, 0x7fffffff}, &(0x7f00000003c0)=0x14)
socket(0x10, 0x20000000080003, 0xc)

[ 1531.032738] Sensor A: Brightness: 128
[ 1531.039953] Sensor A: Contrast: 128
[ 1531.073912] Sensor A: Hue: 0
[ 1531.077126] Sensor A: Saturation: 128
09:24:56 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0xfeffffff00000000}}}], 0xffffff76)

[ 1531.091061] Sensor A: ==================  END STATUS  ==================
09:24:56 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x5000000, 0x0, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:24:56 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00 '], 0x0, 0x0, 0x0})

09:24:56 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0xffffffff00000000}}}], 0xffffff76)

09:24:56 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff000000002000"], 0x2c)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080))

[ 1531.319139] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:24:56 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7]})

09:24:56 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff000000002000"], 0x2c)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080))

09:24:56 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x6000000, 0x0, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1531.426617] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1531.493251] binder_transaction: 4 callbacks suppressed
[ 1531.493261] binder: 27089:27097 got transaction with invalid data ptr
[ 1531.513983] Sensor A: =================  START STATUS  =================
[ 1531.520854] Sensor A: Test Pattern: 75% Colorbar
[ 1531.553031] binder_transaction: 5 callbacks suppressed
[ 1531.553049] binder: 27089:27097 transaction failed 29201/-14, size 8192-0 line 3053
09:24:56 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff000000002000"], 0x2c)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080))

[ 1531.595041] Sensor A: Vertical Flip: false
[ 1531.617327] Sensor A: Horizontal Flip: false
[ 1531.633029] Sensor A: Brightness: 128
[ 1531.648093] Sensor A: Contrast: 128
09:24:56 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0x11fffff76)

[ 1531.666447] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1531.674704] Sensor A: Hue: 0
[ 1531.678239] Sensor A: Saturation: 128
[ 1531.696695] Sensor A: ==================  END STATUS  ==================
09:24:56 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00 '], 0x0, 0x0, 0x0})

[ 1531.741748] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1531.876247] binder: 27122:27123 got transaction with invalid data ptr
[ 1531.908651] binder: 27122:27123 transaction failed 29201/-14, size 8192-0 line 3053
09:24:56 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ff]})

09:24:56 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff00000000200001000000010400000000000003000000000000000000"], 0x42)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080))

09:24:56 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
r2 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000100)=0x44)
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

09:24:56 executing program 4:
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="5d92efdf6644c3f88f4acc0f9af8")
socket$inet(0x2, 0x6000000000000003, 0x6)
r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x80000000, 0x200000)
ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f00000000c0))
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0x3b028fb06411ad30, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0)
pipe2(&(0x7f0000000100)={<r1=>0xffffffffffffffff}, 0x84000)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', r1}, 0x10)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffe)
ioctl(r2, 0x6, &(0x7f0000000080)="0a5cc80700315f85715070")
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x100000000, 0x4)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000880)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100a27f03cb723ee59700c000ffa1812491722194ffff7f00000000080000"])
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000880)}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40485404, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x3}})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00')
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r7, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000300)=@sack_info={<r9=>0x0, 0x5, 0x7}, &(0x7f0000000340)=0xc)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000380)={r9, 0x1ff, 0x8, 0x401, 0x1ff, 0x7fffffff}, &(0x7f00000003c0)=0x14)
socket(0x10, 0x20000000080003, 0xc)

09:24:56 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x7000000, 0x0, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:24:56 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff00000000200001000000010400000000000003000000000000000000"], 0x42)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080))

[ 1532.034447] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1532.050493] Sensor A: =================  START STATUS  =================
09:24:57 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x00 '], 0x0, 0x0, 0x0})

09:24:57 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff00000000200001000000010400000000000003000000000000000000"], 0x42)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080))

[ 1532.074853] Sensor A: Test Pattern: 75% Colorbar
[ 1532.089790] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1532.110870] Sensor A: Vertical Flip: false
09:24:57 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x1, 0x2)
ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f0000000740))
r4 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

[ 1532.169786] Sensor A: Horizontal Flip: false
09:24:57 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x7fffffe, 0x0, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1532.198738] Sensor A: Brightness: 128
[ 1532.247890] Sensor A: Contrast: 128
[ 1532.261852] Sensor A: Hue: 0
[ 1532.283978] Sensor A: Saturation: 128
09:24:57 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00 '], 0x0, 0x0, 0x0})

[ 1532.302765] Sensor A: ==================  END STATUS  ==================
[ 1532.303898] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:24:57 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x800000000002)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

09:24:57 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd]})

09:24:57 executing program 4:
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="5d92efdf6644c3f88f4acc0f9af8")
socket$inet(0x2, 0x6000000000000003, 0x6)
r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x80000000, 0x200000)
ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f00000000c0))
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0x3b028fb06411ad30, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0)
pipe2(&(0x7f0000000100)={<r1=>0xffffffffffffffff}, 0x84000)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', r1}, 0x10)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffe)
ioctl(r2, 0x6, &(0x7f0000000080)="0a5cc80700315f85715070")
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x100000000, 0x4)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000880)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100a27f03cb723ee59700c000ffa1812491722194ffff7f00000000080000"])
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000880)}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40485404, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x3}})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00')
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r7, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000300)=@sack_info={<r9=>0x0, 0x5, 0x7}, &(0x7f0000000340)=0xc)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000380)={r9, 0x1ff, 0x8, 0x401, 0x1ff, 0x7fffffff}, &(0x7f00000003c0)=0x14)
socket(0x10, 0x20000000080003, 0xc)

09:24:57 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff000000002000010000000104000000000000030000000000000000000000001200000300000000"], 0x4d)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080))

09:24:57 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff000000002000010000000104000000000000030000000000000000000000001200000300000000"], 0x4d)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080))

[ 1532.470836] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1532.499258] binder: 27171:27178 got transaction with invalid data ptr
09:24:57 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='eth1@]&*{\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fadvise64(r0, 0x0, 0x3, 0x3)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

[ 1532.549840] Sensor A: =================  START STATUS  =================
[ 1532.552290] binder: 27171:27178 transaction failed 29201/-14, size 8192-0 line 3053
[ 1532.601473] Sensor A: Test Pattern: 75% Colorbar
09:24:57 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x20000000, 0x0, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1532.652699] Sensor A: Vertical Flip: false
[ 1532.691524] Sensor A: Horizontal Flip: false
09:24:57 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff000000002000010000000104000000000000030000000000000000000000001200000300000000"], 0x4d)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080))

[ 1532.718161] Sensor A: Brightness: 128
09:24:57 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z\x00 '], 0x0, 0x0, 0x0})

[ 1532.764151] binder_release_work: 5 callbacks suppressed
[ 1532.764159] binder: undelivered TRANSACTION_ERROR: 29201
[ 1532.775250] Sensor A: Contrast: 128
[ 1532.794111] Sensor A: Hue: 0
[ 1532.809529] Sensor A: Saturation: 128
09:24:57 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = dup2(r3, r3)
ioctl$EXT4_IOC_RESIZE_FS(r2, 0x40086610, &(0x7f0000000100)=0x8000)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x2, 0x2, 0x400000000, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x100000001})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000000c0)={0x80000001, 0x561, 0xfffffffffffffffe, 0x4, 0x7}, 0x14)

[ 1532.820404] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1532.859597] Sensor A: ==================  END STATUS  ==================
[ 1532.891353] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:24:57 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1532.940277] binder: 27213:27214 got transaction with invalid data ptr
[ 1532.963067] binder: 27213:27214 transaction failed 29201/-14, size 8192-0 line 3053
09:24:57 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe7]})

09:24:57 executing program 4:
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="5d92efdf6644c3f88f4acc0f9af8")
socket$inet(0x2, 0x6000000000000003, 0x6)
r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x80000000, 0x200000)
ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f00000000c0))
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0x3b028fb06411ad30, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0)
pipe2(&(0x7f0000000100)={<r1=>0xffffffffffffffff}, 0x84000)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', r1}, 0x10)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffe)
ioctl(r2, 0x6, &(0x7f0000000080)="0a5cc80700315f85715070")
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x100000000, 0x4)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000880)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100a27f03cb723ee59700c000ffa1812491722194ffff7f00000000080000"])
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000880)}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40485404, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x3}})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00')
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r7, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000300)=@sack_info={<r9=>0x0, 0x5, 0x7}, &(0x7f0000000340)=0xc)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000380)={r9, 0x1ff, 0x8, 0x401, 0x1ff, 0x7fffffff}, &(0x7f00000003c0)=0x14)
socket(0x10, 0x20000000080003, 0xc)

[ 1533.037005] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1533.084053] Sensor A: =================  START STATUS  =================
[ 1533.109768] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1533.117127] Sensor A: Test Pattern: 75% Colorbar
09:24:58 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000fffffdfd0020"], 0x0, 0x0, 0x0})

09:24:58 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x40000000, 0x0, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1533.140893] binder: undelivered TRANSACTION_ERROR: 29201
[ 1533.153592] Sensor A: Vertical Flip: false
[ 1533.168730] Sensor A: Horizontal Flip: false
[ 1533.196094] Sensor A: Brightness: 128
[ 1533.211988] Sensor A: Contrast: 128
[ 1533.228842] binder: 27231:27233 got transaction with invalid data ptr
[ 1533.237368] Sensor A: Hue: 0
[ 1533.240624] Sensor A: Saturation: 128
[ 1533.245154] Sensor A: ==================  END STATUS  ==================
[ 1533.252250] binder: 27231:27233 transaction failed 29201/-14, size 8192-0 line 3053
09:24:58 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000fdfdffff0020"], 0x0, 0x0, 0x0})

09:24:58 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99800]})

[ 1533.331065] binder: undelivered TRANSACTION_ERROR: 29201
[ 1533.510136] Sensor A: =================  START STATUS  =================
[ 1533.510525] binder: 27240:27241 got transaction with invalid data ptr
[ 1533.539043] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1533.546574] Sensor A: Test Pattern: 75% Colorbar
09:24:58 executing program 4:
r0 = socket(0x10, 0x4, 0x6e3)
sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0xffffffff00000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000000)=@ipv4_delroute={0x24, 0x19, 0x401, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0xff}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0)

09:24:58 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x60000000, 0x0, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1533.558384] binder: 27240:27241 transaction failed 29201/-14, size 8192-0 line 3053
[ 1533.575880] Sensor A: Vertical Flip: false
[ 1533.590482] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1533.600856] Sensor A: Horizontal Flip: false
[ 1533.652466] Sensor A: Brightness: 128
[ 1533.661524] Sensor A: Contrast: 128
[ 1533.675291] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1533.707186] Sensor A: Hue: 0
[ 1533.710339] Sensor A: Saturation: 128
[ 1533.724219] binder: undelivered TRANSACTION_ERROR: 29201
[ 1533.727316] Sensor A: ==================  END STATUS  ==================
[ 1533.826860] Sensor A: =================  START STATUS  =================
[ 1533.851411] Sensor A: Test Pattern: 75% Colorbar
[ 1533.879104] Sensor A: Vertical Flip: false
[ 1533.883534] Sensor A: Horizontal Flip: false
[ 1533.888004] Sensor A: Brightness: 128
[ 1533.892325] Sensor A: Contrast: 128
[ 1533.919357] Sensor A: Hue: 0
[ 1533.922398] Sensor A: Saturation: 128
[ 1533.927816] Sensor A: ==================  END STATUS  ==================
09:24:59 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff000000002000010000000104000000000000030000000000000000000000001200000300000000000000000000"], 0x53)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080))

09:24:59 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x2000, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@mcast2, @in=@broadcast}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000180)=0xe8)
sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f00006bcff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000000000a0000000000000000000000080015000300000008001600040001004a3a3a204505afa1333e82076208742b"], 0x2c}}, 0x0)

09:24:59 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000200000020"], 0x0, 0x0, 0x0})

09:24:59 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0xfeffff07, 0x0, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:24:59 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x980001]})

09:24:59 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
r2 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x800000100000000)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)
ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f00000000c0)=0x35c)
write$capi20(r3, &(0x7f0000000100)={0x10, 0x3, 0x82, 0x83, 0x4, 0x100000001}, 0x10)

[ 1534.524003] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1534.542210] Sensor A: =================  START STATUS  =================
[ 1534.562797] binder: 27264:27278 got transaction with invalid data ptr
[ 1534.567603] Sensor A: Test Pattern: 75% Colorbar
09:24:59 executing program 4:
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0x14)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x3, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x3)
ioctl$VIDIOC_QBUF(r0, 0x40045613, &(0x7f00000001c0)={0x9, 0x0, 0x4, 0x0, {0x0, 0x2710}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4, "0178bd41"}, 0x0, 0x0, @fd, 0x4})
syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x100010000000, 0x40300)

[ 1534.574487] binder: 27264:27278 transaction failed 29201/-14, size 8192-0 line 3053
09:24:59 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
clock_getres(0x0, &(0x7f0000000100))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x8041)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000000c0)={r1, 0x0, 0xfe04, 0x3ff, 0x5})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f00000001c0)={{0x7fa, 0x3}, {0x4, 0x1f}, 0x1, 0x7, 0x5})

[ 1534.615971] Sensor A: Vertical Flip: false
[ 1534.643437] Sensor A: Horizontal Flip: false
09:24:59 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0xff000000, 0x0, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1534.664731] Sensor A: Brightness: 128
[ 1534.685188] Sensor A: Contrast: 128
[ 1534.704175] Sensor A: Hue: 0
[ 1534.716884] Sensor A: Saturation: 128
09:24:59 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x5)
ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000540))
recvmsg$kcm(0xffffffffffffff9c, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)=""/192, 0xc0}, {&(0x7f0000000240)=""/243, 0xf3}, {&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000340)=""/242, 0xf2}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x5, &(0x7f00000001c0)}, 0x1)
bind$rds(r2, &(0x7f0000000500)={0x2, 0x4e21, @multicast1}, 0x10)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1000000007, &(0x7f0000000640)=0x6, 0x4)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000016c0)={'team0\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001700)={'vcan0\x00', r3})
getsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f0000000200), &(0x7f0000000180)=0x4)

[ 1534.736105] Sensor A: ==================  END STATUS  ==================
[ 1534.774530] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:24:59 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x500, 0x0)
getsockopt$packet_int(r4, 0x107, 0x1b, &(0x7f0000000100), &(0x7f0000000140)=0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r5 = dup2(r1, r0)
getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000440)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@dev}}}, &(0x7f0000000240)=0xe8)
stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
fstat(0xffffffffffffff9c, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
getresuid(&(0x7f0000000680)=<r10=>0x0, &(0x7f00000006c0), &(0x7f0000000700))
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000740)={0x0, <r11=>0x0}, &(0x7f0000000780)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f00000008c0)=0xe8)
getresuid(&(0x7f0000000900), &(0x7f0000000940)=<r13=>0x0, &(0x7f0000000980))
r14 = geteuid()
getresgid(&(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40)=<r15=>0x0)
fstat(r4, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0})
fsetxattr$system_posix_acl(r4, &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000b00)={{}, {0x1, 0xa1e75d3799b19bf4}, [{0x2, 0x4, r6}, {0x2, 0x6, r7}, {0x2, 0x1, r8}, {0x2, 0x3, r9}, {0x2, 0x0, r10}, {0x2, 0x2, r11}, {0x2, 0x6, r12}, {0x2, 0x2, r13}, {0x2, 0x1, r14}], {0x4, 0x1}, [{0x8, 0x5, r15}, {0x8, 0x3, r16}], {0x10, 0x2}, {0x20, 0x3}}, 0x7c, 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

[ 1534.836240] IPVS: ftp: loaded support on port[0] = 21
09:24:59 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:24:59 executing program 4:
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
ioctl$TCSBRKP(r0, 0x5425, 0x87)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x4, 0x6013, r1, 0x81000000)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f00000007c0)={0x140, r2, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x62}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xa6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3f}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7fff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x81}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x370d239}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x40804}, 0x4044)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000740)=@filter={'filter\x00', 0xe, 0x3, 0x498, [0x0, 0x20000280, 0x20000408, 0x20000528], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x9, 0x1, 0x800, 'syzkaller0\x00', '\x00', 'veth1_to_hsr\x00', 'ip6gretap0\x00', @remote, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], @remote, [0xff, 0xff, 0xff, 0xff, 0xff], 0x70, 0x110, 0x158}, [@common=@log={'log\x00', 0x28, {{0x2, "e811fd5dbbc68c344471ca29bef5b9dc00a56f0fe66b605de1bace02dec3", 0xc}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x9, 'syz1\x00', 0x34}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x3, 0x5, 0x16dc}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x10, 0x88a2, 'nr0\x00', 'veth1_to_team\x00', 'lapb0\x00', 'veth0_to_bond\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff], @dev={[], 0x1f}, [0xff, 0xff, 0xff, 0xff], 0x70, 0xb8, 0xf0}, [@common=@ERROR={'ERROR\x00', 0x20, {"4dbff9131bd46050a0c75c3b6cbab5992758502223cf8aadd9231638939e"}}]}, @common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0x9, 0x11, 0x88e7, 'eql\x00', 'bond0\x00', 'lapb0\x00', 'syz_tun\x00', @dev={[], 0xa}, [0x0, 0xff, 0xff, 0xff, 0xff], @broadcast, [0x7c8cf585eba3c01b, 0x0, 0x0, 0x0, 0xff], 0x100, 0x160, 0x190, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0x6, 0x9}}}, @nfacct={'nfacct\x00', 0x28, {{'syz1\x00', 0x10001}}}]}, [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}]}, @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff}]}, 0x510)
sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000900)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r2, 0x22, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x5)

[ 1534.968153] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1535.309744] binder: BINDER_SET_CONTEXT_MGR already set
[ 1535.315551] Sensor A: =================  START STATUS  =================
[ 1535.327259] binder: 27264:27315 ioctl 40046207 0 returned -16
[ 1535.327293] binder_alloc: 27264: binder_alloc_buf, no vma
[ 1535.337852] Sensor A: Test Pattern: 75% Colorbar
[ 1535.343318] binder: 27264:27316 transaction failed 29189/-3, size 8192-0 line 3035
[ 1535.347835] Sensor A: Vertical Flip: false
[ 1535.351829] binder: undelivered TRANSACTION_ERROR: 29201
[ 1535.359357] Sensor A: Horizontal Flip: false
[ 1535.361983] binder: undelivered TRANSACTION_ERROR: 29189
[ 1535.369555] Sensor A: Brightness: 128
[ 1535.379805] Sensor A: Contrast: 128
[ 1535.384214] Sensor A: Hue: 0
[ 1535.393568] Sensor A: Saturation: 128
[ 1535.418069] Sensor A: ==================  END STATUS  ==================
[ 1535.854144] chnl_net:caif_netlink_parms(): no params data found
[ 1535.890079] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1535.896634] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1535.903702] device bridge_slave_0 entered promiscuous mode
[ 1535.910557] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1535.917298] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1535.924847] device bridge_slave_1 entered promiscuous mode
[ 1536.100048] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 1536.109453] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 1536.129112] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 1536.136859] team0: Port device team_slave_0 added
[ 1536.142436] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 1536.149930] team0: Port device team_slave_1 added
[ 1536.155501] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 1536.320227] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 1536.395753] device hsr_slave_0 entered promiscuous mode
[ 1536.463782] device hsr_slave_1 entered promiscuous mode
[ 1536.543170] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 1536.706847] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 1536.724047] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1536.730376] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1536.737098] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1536.743540] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1536.753291] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1536.760633] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1536.956549] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1537.134953] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 1537.144306] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[ 1537.150425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1537.157599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1537.488298] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 1537.494828] 8021q: adding VLAN 0 to HW filter on device team0
[ 1537.503552] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[ 1537.510552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1537.518613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1537.527460] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1537.533872] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1537.542380] device bridge_slave_1 left promiscuous mode
[ 1537.548203] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1537.600449] device bridge_slave_0 left promiscuous mode
[ 1537.606136] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1541.915732] device hsr_slave_1 left promiscuous mode
[ 1541.968916] device hsr_slave_0 left promiscuous mode
[ 1542.028271] team0 (unregistering): Port device team_slave_1 removed
[ 1542.039821] team0 (unregistering): Port device team_slave_0 removed
[ 1542.053622] bond0 (unregistering): Releasing backup interface bond_slave_1
[ 1542.078436] bond0 (unregistering): Releasing backup interface bond_slave_0
[ 1542.185184] bond0 (unregistering): Released all slaves
[ 1542.335956] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[ 1542.343153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1542.351000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1542.359417] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1542.365847] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1542.376603] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[ 1542.384321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1542.394658] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[ 1542.404818] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[ 1542.411705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1542.420034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1542.428054] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1542.436437] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1542.448593] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[ 1542.455725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1542.456439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1542.473999] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[ 1542.484122] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[ 1542.490884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1542.500151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1542.507887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1542.515531] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1542.525543] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1542.531628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1542.549825] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[ 1542.564700] 8021q: adding VLAN 0 to HW filter on device batadv0
09:25:07 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff000000002000010000000104000000000000030000000000000000000000001200000300000000000000000000"], 0x53)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080))

09:25:07 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:25:07 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58)
accept4$alg(r3, 0x0, 0x0, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[], 0xfffffdea)
r4 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x4048082, &(0x7f0000000440)={0xa, 0x4e23, 0x0, @mcast2, 0x6}, 0x1c)
sendto$inet6(r4, &(0x7f0000000480)='\n', 0x1, 0x0, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={<r5=>0xffffffffffffffff, r1, 0x0, 0x5, &(0x7f0000000000)='hash\x00', 0xffffffffffffffff}, 0x30)
move_pages(r5, 0xa, &(0x7f0000000080)=[&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil], &(0x7f0000000140)=[0x4], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4)
connect$tipc(r2, &(0x7f0000000240)=@name={0x1e, 0x2, 0x2, {{0x2, 0x2}, 0x3}}, 0x10)

09:25:07 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
r2 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4001fc)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

09:25:07 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x980900]})

09:25:07 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000300000020"], 0x0, 0x0, 0x0})

[ 1542.677264] binder: 27331:27332 got transaction with invalid data ptr
[ 1542.679666] Sensor A: =================  START STATUS  =================
[ 1542.690597] binder: 27331:27332 transaction failed 29201/-14, size 8192-0 line 3053
[ 1542.691189] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1542.716639] Sensor A: Test Pattern: 75% Colorbar
09:25:07 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff000000002000010000000104000000000000030000000000000000000000001200000300000000000000000000"], 0x53)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080))

09:25:07 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000400000020"], 0x0, 0x0, 0x0})

[ 1542.728434] Sensor A: Vertical Flip: false
[ 1542.736614] Sensor A: Horizontal Flip: false
[ 1542.741423] Sensor A: Brightness: 128
[ 1542.759302] binder: undelivered TRANSACTION_ERROR: 29201
[ 1542.771753] Sensor A: Contrast: 128
09:25:07 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
rt_sigsuspend(&(0x7f00000000c0)={0x4}, 0x8)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$CAPI_GET_ERRCODE(r3, 0x80024321, &(0x7f0000000100))
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x46, 0x100000001, 0x3, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

[ 1542.807316] Sensor A: Hue: 0
09:25:07 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1542.853681] Sensor A: Saturation: 128
[ 1542.858119] Sensor A: ==================  END STATUS  ==================
[ 1542.864325] binder: 27347:27351 got transaction with invalid data ptr
[ 1542.888222] binder: 27347:27351 transaction failed 29201/-14, size 8192-0 line 3053
09:25:07 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x980901]})

09:25:07 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff000000002000010000000104000000000000030000000000000000000000001200000300000000000000000000000000"], 0x56)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080))

09:25:07 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000500000020"], 0x0, 0x0, 0x0})

[ 1543.013980] Sensor A: =================  START STATUS  =================
[ 1543.016498] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1543.040838] Sensor A: Test Pattern: 75% Colorbar
[ 1543.045989] binder: undelivered TRANSACTION_ERROR: 29201
[ 1543.057787] Sensor A: Vertical Flip: false
09:25:08 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff000000002000010000000104000000000000030000000000000000000000001200000300000000000000000000000000"], 0x56)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080))

[ 1543.078274] Sensor A: Horizontal Flip: false
[ 1543.115597] Sensor A: Brightness: 128
[ 1543.127793] binder: 27372:27373 got transaction with invalid data ptr
[ 1543.133056] Sensor A: Contrast: 128
[ 1543.145208] Sensor A: Hue: 0
[ 1543.158043] Sensor A: Saturation: 128
[ 1543.168867] Sensor A: ==================  END STATUS  ==================
[ 1543.193124] binder: 27372:27373 transaction failed 29201/-14, size 8192-0 line 3053
[ 1543.287093] binder: undelivered TRANSACTION_ERROR: 29201
09:25:08 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:25:08 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff000000002000010000000104000000000000030000000000000000000000001200000300000000000000000000000000"], 0x56)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080))

09:25:08 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x980902]})

09:25:08 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x80, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x1, 0x70040)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x20)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1ff)
fcntl$setflags(r0, 0x2, 0x1)
semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000000000)=""/7)
getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={<r3=>0x0, 0x7}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r3, 0x0, 0x8}, &(0x7f00000001c0)=0xc)

09:25:08 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000600000020"], 0x0, 0x0, 0x0})

09:25:08 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff00000000200001000000010400000000000003000000000000000000000000120000030000000000000000000000000000"], 0x57)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080))

[ 1543.601159] binder: 27390:27394 got transaction with invalid data ptr
[ 1543.602704] Sensor A: =================  START STATUS  =================
[ 1543.618640] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1543.625452] binder: 27390:27394 transaction failed 29201/-14, size 8192-0 line 3053
[ 1543.684196] Sensor A: Test Pattern: 75% Colorbar
[ 1543.712227] Sensor A: Vertical Flip: false
09:25:08 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x230c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0305302, &(0x7f00000002c0))

09:25:08 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendto(r2, &(0x7f0000000440)="a24c28d0b58ac24ea042b7898cc2cd37fb9b34f18c0d4091b6ff43f7469824e21375a80ea252449638cacd5f7e931a719e768e187325317f3e6e6cf94e2928cd47f5af997b4501982a606b882807a87174ae8a22e047908501b0469d7a5360cacd94841de3aeb80383e3a9dfb7358e6b1125285666069546cb9d5f06ea887a033fb2d0efc44a51d2ff05c2b33ef93f2a4056a3a87dda14218856c28bf8718e6e249b4895a71d737e045a98c773ba7bc43c01cdbcbb85ca9b374b9df606d6674e2c8577a9e2a051d604f8eba27057e471c99de6c4b27377a147b01dbfdb11f88f6356aa1cae924ecde31de087", 0xec, 0x4010, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e22, @multicast2}, 0x1, 0x0, 0x1, 0x2}}, 0x80)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

09:25:08 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1543.740095] Sensor A: Horizontal Flip: false
09:25:08 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00 '], 0x0, 0x0, 0x0})

[ 1543.776349] binder: undelivered TRANSACTION_ERROR: 29201
[ 1543.787839] Sensor A: Brightness: 128
[ 1543.832643] Sensor A: Contrast: 128
[ 1543.855024] Sensor A: Hue: 0
09:25:08 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080))

09:25:08 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:sulogin_exec_t:s0\x00', 0x24)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070")
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = creat(&(0x7f0000000080)='./file0\x00', 0x4)
ioctl$IMCTRLREQ(r4, 0x80044945, &(0x7f0000000140)={0x4012, 0x5, 0x6, 0x9})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfa, 0x0, 0x0, 0xfffffffffffffd9c)
ioctl$KVM_NMI(r2, 0xae9a)
unlink(&(0x7f0000000040)='./file0\x00')
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1543.875677] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1543.882617] Sensor A: Saturation: 128
[ 1543.888263] Sensor A: ==================  END STATUS  ==================
[ 1543.895868] binder: 27419:27420 got transaction with invalid data ptr
[ 1543.953234] binder: 27419:27420 transaction failed 29201/-14, size 8192-0 line 3053
09:25:08 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000740)={0x7, 0x0, [{0x2000, 0x7b, &(0x7f00000000c0)=""/123}, {0x100000, 0xa, &(0x7f0000000140)=""/10}, {0x100000, 0x78, &(0x7f0000000200)=""/120}, {0x3000, 0xbb, &(0x7f0000000340)=""/187}, {0x4000, 0xe1, &(0x7f0000000440)=""/225}, {0x1f005, 0xdb, &(0x7f0000000540)=""/219}, {0xf000, 0x29, &(0x7f0000000180)=""/41}]})
syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = dup2(r1, r1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

09:25:08 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x980903]})

09:25:09 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:25:09 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00 '], 0x0, 0x0, 0x0})

09:25:09 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, 0x0, 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080))

[ 1544.148590] Sensor A: =================  START STATUS  =================
[ 1544.158544] binder: undelivered TRANSACTION_ERROR: 29201
[ 1544.226893] Sensor A: Test Pattern: 75% Colorbar
[ 1544.231710] Sensor A: Vertical Flip: false
[ 1544.251739] binder: 27446:27448 got transaction with invalid data ptr
09:25:09 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080))

[ 1544.286136] binder: 27446:27448 transaction failed 29201/-14, size 8192-0 line 3053
[ 1544.298490] Sensor A: Horizontal Flip: false
[ 1544.325611] Sensor A: Brightness: 128
[ 1544.352925] Sensor A: Contrast: 128
[ 1544.397436] Sensor A: Hue: 0
09:25:09 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000001200000020"], 0x0, 0x0, 0x0})

[ 1544.432814] Sensor A: Saturation: 128
[ 1544.449016] binder: undelivered TRANSACTION_ERROR: 29201
[ 1544.456345] Sensor A: ==================  END STATUS  ==================
09:25:09 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

[ 1544.523023] binder: 27458:27459 got transaction with invalid data ptr
09:25:09 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

[ 1544.572747] binder: 27458:27459 transaction failed 29201/-14, size 8192-0 line 3053
09:25:09 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x980914]})

[ 1544.712877] Sensor A: =================  START STATUS  =================
[ 1544.744824] Sensor A: Test Pattern: 75% Colorbar
[ 1544.766799] Sensor A: Vertical Flip: false
09:25:09 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00 '], 0x0, 0x0, 0x0})

[ 1544.791590] binder: undelivered TRANSACTION_ERROR: 29201
[ 1544.818713] Sensor A: Horizontal Flip: false
[ 1544.885894] Sensor A: Brightness: 128
[ 1544.908227] Sensor A: Contrast: 128
[ 1544.923191] Sensor A: Hue: 0
[ 1544.926372] Sensor A: Saturation: 128
[ 1544.943679] binder: 27477:27478 got transaction with invalid data ptr
[ 1544.950344] binder: 27477:27478 transaction failed 29201/-14, size 8192-0 line 3053
[ 1544.955180] Sensor A: ==================  END STATUS  ==================
09:25:10 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0xfffffffffffffffc})
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5)
getpgrp(0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="757365722e2e70726f635e0084685d011f0f92ff3c70f35a3ae9afb0390755"], &(0x7f0000000280)='/dev/ptmx\x00', 0xa, 0x1)
ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000240))
socket$rds(0x15, 0x5, 0x0)
r3 = syz_open_pts(r0, 0x5)
r4 = dup3(r3, r0, 0x0)
uname(0x0)
time(&(0x7f0000000180))
ioctl$TCSETS(r4, 0x5402, &(0x7f00000000c0)={0x7, 0x0, 0xc4, 0x9, 0x4, 0x9, 0x100, 0x1, 0x0, 0xff, 0x9, 0x6})
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000200)={0x7fff, 0xfff, 0x0, 0x5, 0x0, 0x0, 0x3, 0xc00000, 0x0, 0x0, 0x401, 0x10000000000})
ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000240)={0x1, 0xb8e})
write$UHID_INPUT(r4, &(0x7f0000001640)={0x8, "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", 0x1000}, 0x1006)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000002c0)=0x1f)
ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000300)={0x7, 0x5, 0x6, 0x5d, 0x6, 0x800})

[ 1545.142743] binder: undelivered TRANSACTION_ERROR: 29201
09:25:10 executing program 3:
r0 = memfd_create(&(0x7f0000000200)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x1)
r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x10000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)
ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000000c0)={0x8000, 0x5, 0x4, 0x4000, {0x0, 0x7530}, {0x1, 0x1, 0x2, 0x2, 0x8, 0x100000000, "eca9b9bc"}, 0x5, 0x3, @offset=0x80000000, 0x4})

09:25:10 executing program 0 (fault-call:3 fault-nth:0):
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

[ 1545.241437] FAULT_INJECTION: forcing a failure.
[ 1545.241437] name failslab, interval 1, probability 0, space 0, times 0
[ 1545.303388] CPU: 0 PID: 27485 Comm: syz-executor0 Not tainted 4.20.0+ #10
[ 1545.310370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1545.319728] Call Trace:
[ 1545.322328]  dump_stack+0x1db/0x2d0
[ 1545.326011]  ? dump_stack_print_info.cold+0x20/0x20
[ 1545.331076]  ? vfs_write+0x2f0/0x580
[ 1545.334805]  should_fail.cold+0xa/0x15
[ 1545.338708]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1545.343827]  ? ___might_sleep+0x1e7/0x310
[ 1545.348015]  ? arch_local_save_flags+0x50/0x50
[ 1545.352616]  ? check_preemption_disabled+0x48/0x290
[ 1545.357653]  __should_failslab+0x121/0x190
[ 1545.361916]  should_failslab+0x9/0x14
[ 1545.365725]  kmem_cache_alloc+0x2be/0x710
[ 1545.369887]  ? do_syscall_64+0x8c/0x800
[ 1545.373872]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 1545.378476]  getname_flags+0xd6/0x5b0
[ 1545.382307]  __x64_sys_execveat+0xd4/0x130
[ 1545.386580]  do_syscall_64+0x1a3/0x800
[ 1545.390499]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 1545.395443]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 1545.400482]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1545.405344]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1545.410540] RIP: 0033:0x457ec9
[ 1545.413743] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1545.432651] RSP: 002b:00007f6d8f979c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
[ 1545.440371] RAX: ffffffffffffffda RBX: 00007f6d8f979c90 RCX: 0000000000457ec9
[ 1545.447647] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003
[ 1545.454919] RBP: 000000000073bf00 R08: 0000000000001000 R09: 0000000000000000
[ 1545.462198] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6d8f97a6d4
[ 1545.469473] R13: 00000000004be4d6 R14: 00000000004cea20 R15: 0000000000000004
09:25:11 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:25:11 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0xfffffffffffffffc})
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5)
getpgrp(0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="757365722e2e70726f635e0084685d011f0f92ff3c70f35a3ae9afb0390755"], &(0x7f0000000280)='/dev/ptmx\x00', 0xa, 0x1)
ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000240))
socket$rds(0x15, 0x5, 0x0)
r3 = syz_open_pts(r0, 0x5)
r4 = dup3(r3, r0, 0x0)
uname(0x0)
time(&(0x7f0000000180))
ioctl$TCSETS(r4, 0x5402, &(0x7f00000000c0)={0x7, 0x0, 0xc4, 0x9, 0x4, 0x9, 0x100, 0x1, 0x0, 0xff, 0x9, 0x6})
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000200)={0x7fff, 0xfff, 0x0, 0x5, 0x0, 0x0, 0x3, 0xc00000, 0x0, 0x0, 0x401, 0x10000000000})
ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000240)={0x1, 0xb8e})
write$UHID_INPUT(r4, &(0x7f0000001640)={0x8, "e52aac313baccb9b551156a2d7c12b7711c32a17d3c4c9ceef08c2046fe288a7036e513019e5e114cc4ae935d23a9990952824f5d0c1f52e2eb94e5301ba9dc9a02818038eaef46fc2c3ebbe46e4a6024c93823f66462ba3d68913fdeadd1087b06846aa3ddf6ed3dc2b61b4960f48c2edf5cdf23c7e8d3f2e6daa71e66b29bc19e377d7df4637d735194a52da503a0ac44383ba5b3da867e09ceae02a9bfc21e7f28814c2fab7da41344e207ca706dc37592abdb685e4b80eb6dc2b1dc550a1d16166d163a4a220a54d7844facbbb2648ee90aa05c3c03ee447d79e517df8ffe70c215bd0bf69e86a5f48d571b9337590d05e9947727c0d77d18a117f110252735ca6700a55fd26838935808cce7b7c222a75339e44230bdeb99bc39c0c1cc20de74fcb9744f4c4a988f3874a846d31abcf5504d78a3e14f35f6cbd123fcff22890cc17c730c3ea9f74616dfe60064552ec25568a6211bdc39483a28bed0df0afc7d7c6d13d301e080c8846ea512a8ccae7a99da8dd3009feaf204d22e32c5ecc333e616159d55328d375e59194c5c9a0b3843afb283d1d26f59e03105e91aa552386468432a09be73220e942394f34c559797b74bfe7c5c2c639a40e4d2e81e1004b127540a0bdd6be2f95698e75e4f1203a47d61f506ac9364be9d98ae46536f74afe08c450ecb902e00f188c9f32aed0677455e10bbe82c763a464f10f64c403c35376b7a675546835209f0e2809e9c2bd191f784dda4b727bfac512497a07474e6d3e13233601df81abcdb6fbfb152483ec61baaee45a5d733c62107f63c55a046401a5ddef70cef8d52cb4784e3efc34de554c8ff48f7ae3d6dc1ed4eb70fe1e610355fd66ce1af8ff63b6641fb3dadfab8a9b0b1f26ca11f7287258ad4766e08340f8f2fd53e7e5f287bb73c186f0290f225687040c762776a02e5e65f1b9b713e8ef98ffe111b3e4e7b761dd3ed763ed8dafd67625fb300ac752c0ff9c0c04b75be292c3f0247bd0b3560f1c76aff38791037fcf2b812f1601934a8fc769f7198e0df685841489263a1495a8a8bab1a63cb12b3089a3e30aab15ae872437e52a6f0dbc4df2d0e8df4c6bcd47beefc179d85b70b42b319453e6efaff96a509420bec299f227c4b676c58038916897f15430ff52087dd97dd329c6b6e207378053accaa31843a333e4f69586103424f44bd67eb355c1fbe078e62f07ebaae46c3e335372127dc5fa70a4579af715e531bda52761dc206aded4678079720603a577ef7e5fb5a81a525b7c96a4047d9d6bb80d7e0ce55cc0a4f73256ae9c515307f13fe54126786de425d7a674b05116104176faac5b9365b33fd2f5a710a5159d342abecede83ad421bbb712cd5b006671a958cec907311719eb3e0b5dc4fb51054e06656a7a2a066c0aac65ceb434ca3f242cb2b1d7a22179a85cbbeeacc2f0135d8dd4d1363a98d2543fa4973e19eb359e956d27f142c75f62c7aecaf47090236b9791847725bc6fde15cd4a119a4976a3f0f2d622973ad9000aae56f88b396fa1881ec0b0a5de9955fc8f864b36eacd635b88826e0a64897d605fa4a14f7786b037cf308bef61c7f860e38f1ae67fe8cb7802dbe85f9c0c082eed1a13e645370d0c95d63bba215ac8a637b8f968aef06329d62ba131b56b46bfcfa6a5e82016d5eeb6e7db45595d1acaaa5ec9886315d3dced9d0a15c44c043ac91e4ae7077139774607b76cbc017f636145beb84c1829a6030f4a895a56b8d141f743c9189a71387893f785804f85927a23ccd79c432ab686b621ec91706ef082b4ea4fa608ce2daca0d2e2e07ff51e6a8fdc22f1c8ee5ae53720f93b4547704fae580e5560e3c7b1ac2a38ffc294d3c96635e3b919339394843c8a171c7d12ceb9c0a11be25783694b177b399e7a495538e293a59d3ab44b176afed6894aa0e501d9b98981be3f2057bf6c9869403a34cb83ad57150c674301f39524a026f3608a3414287bc4e507355823c6f8640bb803a392fb8847023d1db3c39753e72414682c617de9bd0d5b6a55d46004d49f20d2f8f53cdd8eb11402f7895cd7c01b4964fd005c564b0b0e156969ccde818dda3a7cae02d1d3af95081e6549f28976fa81b5e90fbb0a62fea850ffaf0220132189c11a74996261f6de6001c50364f08c4f48fd46a0417ec8ee4d003efeead64b87d64b43cd6868f365e72e26dd9f5f9f74d135f64464cb38dd62051ae70c5a4daabebe700eb9b290b8ed4142db0090219e6186f8f71fa8fe1ebe42f621b8eed182ee8ad0401f0a3530fd48e4d1eb2637f1fbd2a7032b0f85715203c12ab8ff48131bc4ff28272b57119a76bc0b30fef5294c23c0b2bcadfbba37a00502b5e43d72148d9acc7cb7cb39dc830cd6f30262a09eecf29d1055c2edc3926cfd5076aa5f9f172ed145359fc974ca5ded652433d212607bed155df1aff269414548a39a644b6ce927de5de6e6750575c4fd7ea7fe10b1e51fde6975c0c23fc012a8b12fe3fa64e972e4e09eafea165ae5c1ffc9d761e1314a781959c223b96eefde0f4f45c7ac032a8d3f1bd304114c3329a3e4966eddcc8d44ae70bad2932f963100955e2d2d487347c2aa8356bc6bc3c84e418163c758f1372246884e6d80d87d7ab3fe660dda13ada65f200b4fb365223b93bbc29493ae6dbbbb1823edb8e9f045b60414edab955e1046b67a8d4908ab08ad90216125d2ffd8c7814a9a4940df0a653b1cf53cf456412228445ebc8e1584adfe13207ff24fe602e2a506218710483b5544347a3d515b7d2ddcaa1bb7ae3578841918a8ed00659d5f260d23ae17a9ffc77f79758844586fe53517097838a92dde8873e8be1cd5934f1a4bfdd9d0b5725b811c4a2c121b7729946993a736bd195c55684ea680304af4844a1b2f74e2c2b2ccaeceb00b9c2c515b70912efb27643c5624025e358b44853cc0efddc103ee514471af902cd9b68f102c95a91d2b825b473ce842e6367b0b7305ce8be6f9c812abe860bb632e00b69a0370e5c8f9ba0cebbcbe1b9276949c303a4e9e3b6db37a0716520c07512192364abb58399fca973a1b32106096eda8bb85745562e8a35c5e917fdf858091a4c29d6549e10098d6b205fc5cad546fe07b3a70756cf7079c88f3708f0c8527002b99e80cbd584a3737fb37953cd6dccf21add4d4b6e65894490840c008578737d5e208649d1cd34beb403c2226300297853a29cf6c661b426c13306575d81f6fd21712e0ec4366013883b95a71d5094acbf156e42de11cb873744983ec1ff9cfbee2278053b8b4e523388bd41dfd3c2ecaacc5d9d2958bbfa94f4bd0ac1c61c98ab295dd5c69020f1329818df9a2aa88ced03f4e6a4d1f8cb020afcd2384e65511ddeb908ba0c13a03dd32e8d4ccf0246008f35ef5184f81b8fed73b4aae4998bd8c7d784210042247d39396ba881bf43555d0ec58deede7b4729e79d31b2a346527594ca3a47a1723a792a701dc18d0124365e2c4a4fefed48c29a9f2fc747b302eaf92a100b2da211c91de4ab79d4aede483d852635c6f14d38095a5739d475c7aa67fdd54767a056eeb3098dfd8d1c21f32e76f0247f04118448273586856e641b83f540a643e72dc15804b78bac475f39e23291798aa45a2c10aa5fef2d5e4d7b8f529a66535d11c6149e9797f2fcce2804f2a5370345e98b0c02c7dd27135d414fe72f0740423920d68b64f6b8c05788c6693ee1b9abb5d4593a970dc3ee2528765fb739964f4fed7200d7e796a9f3d0d60834e638dd8c29d4e85011e4ba4f127fe765954a5b5bb5d1cc69f2376599d5a3e8c30714893f763c06061072c10cb0eee17eb2a2514acc584b04e169d4a33a330367bb725ff9462f5d50282a2e393293eec8ea1eaab8217cc108798a4a57eccdb00647ab9f07318993f7c59c395a93cbd681d0a967a56e3f13c832c48dcc0d0096870b0d51b754e70b12a849b6f376923f7f7d909f64d64e1d6e338d39166b725265b96ed21e36b12057148d66e5df04b7b734ed0957d47fde172be2473b9ac6fdb823abe3e11ec69a170a14511d5572d6c0d9f6b749acad7003f0567bb6f9381649e42d02764077330d5af3d93185968a9f8dfed16c4a7c768a2bb98304946a557182c0ce93e82b340074e384cc6bd6129483386c654a6ab3bb12fe8e86adafa93f218fdf5019c09292858acd8ef7aa6a78e3f846215856d630ae9c5fc4009693b2767ea55c469f9099693287b35d43ee0f7a5baf3328d37b2c536f2abd6e21e472c105ae982cdd26a5a20562122e71efb1486c28d9409c3114b608f297695958c5604cf0918c0c70c56c79170260d73bde297e47cae1c404cca0a96eed51a2dc8f6f6ad862fe767ee5b5e68f231096825d935b809b3c1b5d9a2cd76cae22652bed7d263b42612ed717eba0aaf2a3989c4520c402d29428010000000000000062fb3fdd073b91d4e2f6895fba9639ee78bd8ccb5bc3ce442fbeb9a1521314b82804293159fd7df4db66b78a06fe93e705bbc4e0d294a787c3cbf271b2acd15e7b4998c822f7724d3191e2265bd0d694dfb08063c9ff26a424884b46e26b5560d756c114ad1a7b92eee3f49dc2883b604ecc49c5ce92ce467778301326588a6577d44758e8d90710248d110dbf3d3d568779bd1c616369f84619dd089e38b51634f7c5d2ac9f1547a342877815a3864ad70b68b196bde9d810512f411d5235633ef65088788dfa3f152df7cee3a0803f6ac7ae192301dec07ff870ff3d7cf1c09cc9093263b225d01222376531007af9e6fb96e5ccaa8274f70adc786db7f33a20a752717b56b9a03bfce15a1aacd78c4adf8bdf41de8aaf421684c27526088c54322b5eea9175ef9c574c1f873218cc6f5df233892d7d5b0b0649ffc5a1c4909f2967a8c1f15b419ecde0448f071fa71e553f4f12cfa5e35022e75ddc5509edddc3de82d9097759b27f7c24776702e0ff64559281f796f11c1a9c77a156f390d2d18d1759b6be0347eb5bb4df912e9cfafa0db3be3243bacb378ca0946cece695a8099d6d7a24fc8bcca4c09695e3208f17f00bf404f6eb7852dfe73c163a19fd4e890e0edd5c7a727984b6f47a952373b95200bba061756c699c218b52c265b22bcd5cb24fdf056621fdd2126cede171e435320ca34e56e4c82a2afc9a59d3bf4647877658b6f23a6484f37acd8e2e184926993b5d1bbe6cdba64f486b4fb41bb94a644140540894f8fc14e585bc8beae88eabf926add289c82eb8cea99743baed842d76eb5c5573f7a7f3f2693960d6bfed697b5619afd942f41689dbd281a35e32478ba3a388dada82a2f4164481aa6a8f3946a84ea6186b20ce388c202be42996ae90feec7258d4a4a276353df84c96b160ac003d81cf395c0e61b0f0a9e692c32fab307f754cae5de7716a00cb96160cd39c931f4885d612862cecf6ba76502c9d266f97e4cf6cf0a16f787788e5471458a0dc24d3f2a28caa0f7ee00cf8bb113bd9c2b086037d765b5ec9a849df6f482fc01b48261e44299b0bc88321d837b6e2d221ebf2996b4140cd82e531de27f8de445f31c64469a5a145b031cd2569d19e27369c31ec63a989f0c9aaba7cc9d36d652001d40004f83a90d6465854f31bf15d1ef6bff4c02d60b948a37e3f50d250d7f85f545f507014aae5a35908283168c034f654acbb9d0fc261671d612e3d74261653e69e5e9cf7c8fda298b4d6c879cbbb97eafe648ba70150599089d65c1fdc0d5af879a2d46a443ac6dd21b33f72510742db4faf7eeb1580580ffe26e2d5ff", 0x1000}, 0x1006)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000002c0)=0x1f)
ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000300)={0x7, 0x5, 0x6, 0x5d, 0x6, 0x800})

09:25:11 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00\x00\x00 '], 0x0, 0x0, 0x0})

09:25:11 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x980915]})

09:25:11 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r0, r0)
ioctl$PPPIOCSCOMPRESS(r3, 0x4010744d)
r4 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@dev}, 0x0, @in=@remote}}, &(0x7f00000000c0)=0xe8)
bind$can_raw(r4, &(0x7f0000000100)={0x1d, r5}, 0x10)
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

09:25:11 executing program 0 (fault-call:3 fault-nth:1):
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

[ 1546.164057] Sensor A: =================  START STATUS  =================
[ 1546.170982] Sensor A: Test Pattern: 75% Colorbar
[ 1546.208348] FAULT_INJECTION: forcing a failure.
[ 1546.208348] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1546.220192] CPU: 0 PID: 27506 Comm: syz-executor0 Not tainted 4.20.0+ #10
[ 1546.227123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1546.233489] Sensor A: Vertical Flip: false
[ 1546.236484] Call Trace:
[ 1546.240731] Sensor A: Horizontal Flip: false
[ 1546.243331]  dump_stack+0x1db/0x2d0
[ 1546.243352]  ? dump_stack_print_info.cold+0x20/0x20
[ 1546.243374]  ? get_pid_task+0xd4/0x190
[ 1546.243414]  should_fail.cold+0xa/0x15
[ 1546.264179]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1546.269306]  ? rcu_read_unlock_special+0x380/0x380
[ 1546.272653] Sensor A: Brightness: 128
[ 1546.274258]  ? debug_smp_processor_id+0x1c/0x20
[ 1546.278043] Sensor A: Contrast: 128
[ 1546.282716]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1546.282733]  ? check_preemption_disabled+0x48/0x290
[ 1546.282749]  ? __f_unlock_pos+0x19/0x20
[ 1546.282769]  ? debug_smp_processor_id+0x1c/0x20
[ 1546.282785]  ? perf_trace_lock_acquire+0x138/0x7d0
[ 1546.303983] Sensor A: Hue: 0
[ 1546.305565]  ? proc_fail_nth_write+0xa0/0x220
[ 1546.305588]  should_fail_alloc_page+0x50/0x60
[ 1546.305605]  __alloc_pages_nodemask+0x323/0xdc0
[ 1546.322617] Sensor A: Saturation: 128
[ 1546.327197]  ? __alloc_pages_slowpath+0x2cc0/0x2cc0
[ 1546.327228]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1546.327261]  ? ___might_sleep+0x1e7/0x310
[ 1546.342698] Sensor A: ==================  END STATUS  ==================
[ 1546.345706]  ? trace_hardirqs_off+0xb8/0x310
[ 1546.345729]  cache_grow_begin+0x9c/0x8c0
[ 1546.345745]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1546.366576]  ? check_preemption_disabled+0x48/0x290
[ 1546.371611]  kmem_cache_alloc+0x645/0x710
[ 1546.375801]  ? do_syscall_64+0x8c/0x800
[ 1546.379786]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 1546.384380]  getname_flags+0xd6/0x5b0
[ 1546.388197]  __x64_sys_execveat+0xd4/0x130
[ 1546.392444]  do_syscall_64+0x1a3/0x800
[ 1546.396339]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 1546.401277]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 1546.406306]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1546.411166]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1546.416359] RIP: 0033:0x457ec9
[ 1546.419558] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1546.438458] RSP: 002b:00007f6d8f979c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
[ 1546.446171] RAX: ffffffffffffffda RBX: 00007f6d8f979c90 RCX: 0000000000457ec9
09:25:11 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8010010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r4, 0x400, 0x70bd26, 0x25dfdbfc, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x4}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x36559d2453fc1384}, 0x4000)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

09:25:11 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00001]})

[ 1546.453456] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003
[ 1546.460729] RBP: 000000000073bf00 R08: 0000000000001000 R09: 0000000000000000
[ 1546.468004] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6d8f97a6d4
[ 1546.475285] R13: 00000000004be4d6 R14: 00000000004cea20 R15: 0000000000000004
[ 1546.519185] binder: 27504:27510 got transaction with invalid data ptr
[ 1546.553897] binder: 27504:27510 transaction failed 29201/-14, size 8192-0 line 3053
[ 1546.568837] Sensor A: =================  START STATUS  =================
[ 1546.613249] Sensor A: Test Pattern: 75% Colorbar
09:25:11 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='cgroup,\x00', 0x3)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

[ 1546.635594] Sensor A: Vertical Flip: false
[ 1546.666694] Sensor A: Horizontal Flip: false
09:25:11 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00 '], 0x0, 0x0, 0x0})

[ 1546.701178] binder: undelivered TRANSACTION_ERROR: 29201
[ 1546.706532] IPVS: ftp: loaded support on port[0] = 21
[ 1546.706887] Sensor A: Brightness: 128
[ 1546.769251] Sensor A: Contrast: 128
[ 1546.790113] Sensor A: Hue: 0
[ 1546.801675] Sensor A: Saturation: 128
[ 1546.819070] Sensor A: ==================  END STATUS  ==================
[ 1546.839905] binder: 27529:27533 got transaction with invalid data ptr
[ 1546.876046] Sensor A: =================  START STATUS  =================
09:25:11 executing program 3:
r0 = socket$vsock_dgram(0x28, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000001c0)={'bond_slave_1\x00', {0x2, 0x4e23, @remote}})
r1 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0xa6, @tick=0x10000, 0x4, {0x5, 0x6}, 0x9, 0x3, 0x7})
r3 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = dup2(r3, r1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

09:25:11 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

[ 1546.903312] binder: 27529:27533 transaction failed 29201/-14, size 8192-0 line 3053
[ 1546.934595] Sensor A: Test Pattern: 75% Colorbar
[ 1546.979451] Sensor A: Vertical Flip: false
[ 1547.024102] Sensor A: Horizontal Flip: false
[ 1547.058040] Sensor A: Brightness: 128
[ 1547.061980] Sensor A: Contrast: 128
[ 1547.086823] Sensor A: Hue: 0
[ 1547.094026] binder: undelivered TRANSACTION_ERROR: 29201
[ 1547.099762] Sensor A: Saturation: 128
[ 1547.123026] Sensor A: ==================  END STATUS  ==================
[ 1547.341653] chnl_net:caif_netlink_parms(): no params data found
[ 1547.508384] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1547.523289] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1547.530804] device bridge_slave_0 entered promiscuous mode
[ 1547.539082] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1547.546376] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1547.553850] device bridge_slave_1 entered promiscuous mode
[ 1547.577802] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 1547.587602] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 1547.618640] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 1547.639011] team0: Port device team_slave_0 added
[ 1547.647369] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 1547.661270] team0: Port device team_slave_1 added
[ 1547.669515] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 1547.686032] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 1547.746514] device hsr_slave_0 entered promiscuous mode
[ 1547.782929] device hsr_slave_1 entered promiscuous mode
[ 1547.831667] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 1547.838793] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 1547.855752] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1547.862099] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1547.868811] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1547.875220] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1547.919384] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[ 1547.925869] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1547.935578] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 1547.955473] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 1547.961578] 8021q: adding VLAN 0 to HW filter on device team0
[ 1547.968583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1547.976356] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1547.983671] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1547.991095] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 1548.019444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1548.027449] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1548.033858] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1548.040952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1548.048744] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1548.055184] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1548.074489] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1548.082439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1548.090392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1548.098769] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1548.116456] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1548.127564] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1548.133757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1548.140959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1548.164108] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[ 1548.176120] 8021q: adding VLAN 0 to HW filter on device batadv0
09:25:13 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r4 = dup2(r1, r0)
fchdir(r3)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

09:25:13 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:25:13 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00\x00\x00 '], 0x0, 0x0, 0x0})

09:25:13 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f000]})

09:25:13 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1002)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

09:25:13 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0xfffffffffffffffc})
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5)
getpgrp(0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="757365722e2e70726f635e0084685d011f0f92ff3c70f35a3ae9afb0390755"], &(0x7f0000000280)='/dev/ptmx\x00', 0xa, 0x1)
ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000240))
socket$rds(0x15, 0x5, 0x0)
r3 = syz_open_pts(r0, 0x5)
r4 = dup3(r3, r0, 0x0)
uname(0x0)
time(&(0x7f0000000180))
ioctl$TCSETS(r4, 0x5402, &(0x7f00000000c0)={0x7, 0x0, 0xc4, 0x9, 0x4, 0x9, 0x100, 0x1, 0x0, 0xff, 0x9, 0x6})
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000200)={0x7fff, 0xfff, 0x0, 0x5, 0x0, 0x0, 0x3, 0xc00000, 0x0, 0x0, 0x401, 0x10000000000})
ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000240)={0x1, 0xb8e})
write$UHID_INPUT(r4, &(0x7f0000001640)={0x8, "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", 0x1000}, 0x1006)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000002c0)=0x1f)
ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000300)={0x7, 0x5, 0x6, 0x5d, 0x6, 0x800})

[ 1548.287120] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1548.298509] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:25:13 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x102f)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

[ 1548.359291] binder: 27558:27570 got transaction with invalid data ptr
[ 1548.370307] Sensor A: =================  START STATUS  =================
[ 1548.378016] device bridge_slave_1 left promiscuous mode
[ 1548.386916] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1548.395611] binder: 27558:27570 transaction failed 29201/-14, size 8192-0 line 3053
[ 1548.412930] Sensor A: Test Pattern: 75% Colorbar
[ 1548.418859] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1548.428685] device bridge_slave_0 left promiscuous mode
[ 1548.434318] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1548.441778] Sensor A: Vertical Flip: false
[ 1548.446668] Sensor A: Horizontal Flip: false
09:25:13 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f00000001c0)={0x0, 0xfff, 0x9, [], &(0x7f0000000140)={0x0, 0x8001, [], @p_u32=&(0x7f0000000100)=0x8}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

[ 1548.460674] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1548.468880] Sensor A: Brightness: 128
09:25:13 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x00\x00\x00 '], 0x0, 0x0, 0x0})

09:25:13 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x3f00000000000000, 0x0, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1548.506682] Sensor A: Contrast: 128
[ 1548.522722] Sensor A: Hue: 0
[ 1548.529926] binder: undelivered TRANSACTION_ERROR: 29201
[ 1548.552920] Sensor A: Saturation: 128
09:25:13 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x4000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

[ 1548.605708] Sensor A: ==================  END STATUS  ==================
[ 1548.666516] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1548.689679] Sensor A: =================  START STATUS  =================
[ 1548.706342] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:25:13 executing program 0:
r0 = memfd_create(&(0x7f0000000440)='pids.current\x00', 0xffffffffffffffff)
write$binfmt_elf32(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x58)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="c74424000f000000c7442402426f0000c7442406000000000f011c24c423a55d015d67f3430f06440ffb461d66baf80cb8b82a6a86ef66bafc0c66ed2e0fbaae000000008f48b800380000000000000f23c00f21f835020007000f23f866b840000f00d8490fc71866b8c4000f00d8", 0x6f}], 0x1, 0x8, &(0x7f0000000180)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0xe16}, @cstype3={0x5, 0x1}], 0x2)
fanotify_init(0x1, 0x40402)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

09:25:13 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1548.721649] Sensor A: Test Pattern: 75% Colorbar
[ 1548.729806] binder: 27596:27606 got transaction with invalid data ptr
[ 1548.768927] binder: 27596:27606 transaction failed 29201/-14, size 8192-0 line 3053
[ 1548.778339] Sensor A: Vertical Flip: false
09:25:13 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x440, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@hyper})
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000100))
connect$vsock_dgram(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1548.810725] Sensor A: Horizontal Flip: false
09:25:13 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1548.858190] Sensor A: Brightness: 128
[ 1548.864797] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1548.877790] Sensor A: Contrast: 128
[ 1548.884752] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1548.921568] Sensor A: Hue: 0
[ 1548.929827] device hsr_slave_1 left promiscuous mode
[ 1548.941036] Sensor A: Saturation: 128
[ 1548.947530] Sensor A: ==================  END STATUS  ==================
[ 1548.977378] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1548.989636] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1549.015390] device hsr_slave_0 left promiscuous mode
[ 1549.045119] team0 (unregistering): Port device team_slave_1 removed
[ 1549.060258] team0 (unregistering): Port device team_slave_0 removed
[ 1549.076252] bond0 (unregistering): Releasing backup interface bond_slave_1
[ 1549.130949] bond0 (unregistering): Releasing backup interface bond_slave_0
[ 1549.252341] bond0 (unregistering): Released all slaves
09:25:14 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x101000, 0x0)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

09:25:14 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0xfeffff0700000000, 0x0, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:25:14 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})

09:25:14 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x440, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@hyper})
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000100))
connect$vsock_dgram(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1549.416555] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:25:14 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
syz_open_pts(r3, 0x200800)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
mknod$loop(&(0x7f0000000100)='./file0\x00', 0x40, 0x0)
syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00')
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

09:25:14 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00 '], 0x0, 0x0, 0x0})

09:25:14 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0xff00000000000000, 0x0, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1549.457932] Sensor A: =================  START STATUS  =================
[ 1549.486827] binder: undelivered TRANSACTION_ERROR: 29201
[ 1549.520825] Sensor A: Test Pattern: 75% Colorbar
09:25:14 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
flistxattr(r0, &(0x7f0000000040)=""/203, 0xcb)
ioctl(r0, 0x1, &(0x7f0000000480)="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")
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

[ 1549.557199] Sensor A: Vertical Flip: false
[ 1549.572910] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1549.624763] Sensor A: Horizontal Flip: false
[ 1549.635947] binder: 27654:27655 got transaction with invalid data ptr
[ 1549.643711] Sensor A: Brightness: 128
[ 1549.651111] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1549.659779] Sensor A: Contrast: 128
[ 1549.659796] Sensor A: Hue: 0
[ 1549.659810] Sensor A: Saturation: 128
09:25:14 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x440, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@hyper})
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000100))
connect$vsock_dgram(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:25:14 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$alg(0x26, 0x5, 0x0)
ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pipe2(0x0, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x4, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}})
ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000000)=0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r4, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0xffffffffffffff07}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x2004c000)
r5 = dup2(r1, r0)
ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x2)
socket(0x11, 0x3, 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

[ 1549.659921] Sensor A: ==================  END STATUS  ==================
[ 1549.692395] binder: 27654:27655 transaction failed 29201/-14, size 8192-0 line 3053
09:25:14 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z\x00\x00\x00 '], 0x0, 0x0, 0x0})

09:25:14 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:25:14 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200102, 0x0)
setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000140)={{&(0x7f0000000080)=""/93, 0x5d}, &(0x7f0000000100), 0x10}, 0x20)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1500)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

[ 1549.827225] binder: undelivered TRANSACTION_ERROR: 29201
09:25:14 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1009800]})

09:25:14 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x440, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@hyper})
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000100))
connect$vsock_dgram(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1549.954309] binder: 27678:27679 got transaction with invalid data ptr
[ 1549.961026] binder: 27678:27679 transaction failed 29201/-14, size 8192-0 line 3053
[ 1550.015644] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1550.018017] Sensor A: =================  START STATUS  =================
[ 1550.075668] Sensor A: Test Pattern: 75% Colorbar
[ 1550.099279] Sensor A: Vertical Flip: false
[ 1550.118475] Sensor A: Horizontal Flip: false
[ 1550.139305] Sensor A: Brightness: 128
09:25:15 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x20000, 0x0)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x15, 0x1d, &(0x7f00000000c0)="ffef11cc0f0482d51d15103928c282043d2d87db3f5fb1ca59ce202d6a"})
r1 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x6, 0x266000)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, 0x0)

[ 1550.155065] Sensor A: Contrast: 128
09:25:15 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x2, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1550.186223] Sensor A: Hue: 0
[ 1550.216103] Sensor A: Saturation: 128
09:25:15 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000003000020"], 0x0, 0x0, 0x0})

[ 1550.236627] binder: undelivered TRANSACTION_ERROR: 29201
[ 1550.262091] Sensor A: ==================  END STATUS  ==================
09:25:15 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000140)='\x00', 0xffffffffffffffff)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f45090a900000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

09:25:15 executing program 4:
gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x440, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000000c0)={@hyper})
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000100))
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

[ 1550.331218] Sensor A: =================  START STATUS  =================
[ 1550.349687] binder: 27706:27707 got transaction with invalid data ptr
[ 1550.358080] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1550.367197] Sensor A: Test Pattern: 75% Colorbar
[ 1550.432675] Sensor A: Vertical Flip: false
[ 1550.443275] binder: 27706:27707 transaction failed 29201/-14, size 8192-0 line 3053
[ 1550.460001] Sensor A: Horizontal Flip: false
09:25:15 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
shutdown(r0, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

[ 1550.474853] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1550.483762] Sensor A: Brightness: 128
[ 1550.500340] Sensor A: Contrast: 128
[ 1550.533027] Sensor A: Hue: 0
[ 1550.549453] Sensor A: Saturation: 128
[ 1550.561586] Sensor A: ==================  END STATUS  ==================
[ 1550.672905] binder: undelivered TRANSACTION_ERROR: 29201
09:25:15 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f00000000c0)={0x20, 0x0, 'client1\x00', 0xffffffff80000006, "34e3b8cea32c9e48", "009a3aa059d38da708dfac2511973e8f13677aea09e2d0c3d0404c8d180c7f87", 0x0, 0x1})

09:25:15 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100f000]})

09:25:15 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000005000020"], 0x0, 0x0, 0x0})

09:25:15 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x3, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:25:15 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012cc65519e14adb5e15a018b71c085fd0a000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000080)={0x80000000, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88)

[ 1550.776363] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1550.792170] Sensor A: =================  START STATUS  =================
[ 1550.816048] Sensor A: Test Pattern: 75% Colorbar
09:25:15 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x4, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1550.821323] binder: 27743:27744 got transaction with invalid data ptr
[ 1550.837370] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1550.847009] Sensor A: Vertical Flip: false
[ 1550.862731] binder: 27743:27744 transaction failed 29201/-14, size 8192-0 line 3053
[ 1550.862842] Sensor A: Horizontal Flip: false
09:25:15 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)
ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f00000000c0)=0xa9ce)

09:25:15 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2)
ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000080))
ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, 0x0)

09:25:15 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000006000020"], 0x0, 0x0, 0x0})

[ 1550.968418] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1550.980721] Sensor A: Brightness: 128
[ 1550.990445] binder: undelivered TRANSACTION_ERROR: 29201
[ 1551.016659] Sensor A: Contrast: 128
[ 1551.037671] Sensor A: Hue: 0
[ 1551.054815] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1551.064768] Sensor A: Saturation: 128
09:25:16 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x200081, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000080)={0x1, 0x2, 0x0, 0x94bb, 0x3ea8, 0x1})
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

[ 1551.085705] binder: 27764:27767 got transaction with invalid data ptr
[ 1551.093692] Sensor A: ==================  END STATUS  ==================
[ 1551.107109] binder: 27764:27767 transaction failed 29201/-14, size 8192-0 line 3053
[ 1551.233453] binder: undelivered TRANSACTION_ERROR: 29201
09:25:16 executing program 4:
gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x440, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000000c0)={@hyper})
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000100))
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

09:25:16 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x5, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:25:16 executing program 3:
r0 = memfd_create(&(0x7f00000001c0)='\xe87y\xd8\x0e\xfaE\xbb\x87\v\xd0\xcd9\xbd(0\xeeG\xfe\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.\x87t[\x9e\xb5\xf2\v\xd5?m\x8b\x86G\bC\xaa\x8c\x99\xac@\x00tz\xfb]s\x84&]]\xd1u\xa2\xe7ti\a\x9e\xc1z\xa9}\x8b?\x80\xd2m\x04&\xc3\x80\x9f7\xc5\xb2\xff\x98\x9d\x02_\x8d\xb4\xa6\x8d\x9a\x038-\x8d\x00n\x9e\x9b.\xe9:\xea\xfe\'\x10J.\x9fc\b\xff\xec\x88\x97\x10\xb0\x9f\xe0\xb1\x00\x00\x00\x00\x00(\x8b(\xc1\xcd\x9a\f\x87w1\x96N\xbdc\xfb\xb9?\xcc\xb9\xcc\xbc\x89\xa4j\x9b^\x12\xa6\x93\x8c%\xb6\x03\r\x1f\r', 0xffffffffffffffff)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x280800, 0x0)
ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000140))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = dup2(r1, r0)
mq_timedreceive(r4, &(0x7f00000000c0), 0x0, 0x5, &(0x7f0000000100))
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

09:25:16 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00 '], 0x0, 0x0, 0x0})

09:25:16 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1099800]})

09:25:16 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f3600000000000038e7ffffffffffffe7ff00000000200001000000010400000000000003000000000000000000000000120000030000000000002100000000000000003cfa06789c69b1cc95f48ecbc61d"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

[ 1551.384600] binder: 27788:27789 got transaction with invalid data ptr
[ 1551.391323] binder: 27788:27789 transaction failed 29201/-14, size 8192-0 line 3053
[ 1551.405830] Sensor A: =================  START STATUS  =================
[ 1551.413122] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:25:16 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x50)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)
syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000000c0)="b800008ec00fc7acddcb0f090f2340baf80c66b8f6779c8766efbafc0cedf03131247e0f20d566b9800000c00f326635010000000f300f06", 0x38}], 0x1, 0x1, &(0x7f0000000140)=[@cstype0={0x4, 0x7}, @vmwrite={0x8, 0x0, 0x7ff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}], 0x2)

09:25:16 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x6, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1551.439643] Sensor A: Test Pattern: 75% Colorbar
[ 1551.447664] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1551.464067] Sensor A: Vertical Flip: false
[ 1551.473538] Sensor A: Horizontal Flip: false
[ 1551.519799] Sensor A: Brightness: 128
[ 1551.538789] Sensor A: Contrast: 128
[ 1551.552882] Sensor A: Hue: 0
09:25:16 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x42000)
getuid()
getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080), 0x2)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

[ 1551.568099] Sensor A: Saturation: 128
09:25:16 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00 '], 0x0, 0x0, 0x0})

09:25:16 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f36000000000000380020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = fcntl$getown(r0, 0x9)
ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000040)=r2)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x2d2000, 0x0)
getsockopt$inet6_dccp_int(r3, 0x21, 0xf, &(0x7f00000000c0), &(0x7f0000000100)=0x4)

[ 1551.601486] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1551.610350] Sensor A: ==================  END STATUS  ==================
[ 1551.634316] binder: undelivered TRANSACTION_ERROR: 29201
09:25:16 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x7, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1551.750870] binder: 27832:27834 got transaction with invalid data ptr
[ 1551.787200] binder: 27832:27834 transaction failed 29201/-14, size 8192-0 line 3053
[ 1551.808570] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1551.810816] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1551.920990] binder: undelivered TRANSACTION_ERROR: 29201
09:25:17 executing program 4:
gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x440, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000000c0)={@hyper})
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000100))
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

09:25:17 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x100000001, 0x200)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f00000001c0)=0x6, 0x4)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r4 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000200)={0x4, 0xffffffffffffffff, 0x200, 0x0, 0xf})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x4, <r5=>0x0, 0x10003, 0x6})
ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f0000000180)={0xff, r5})

09:25:17 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]})

09:25:17 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685)
r1 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f0700000000ff010000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000900000012000003000000000000000000000000000000"], 0x58)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

09:25:17 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000012000020"], 0x0, 0x0, 0x0})

09:25:17 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x60, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1552.339943] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1552.350422] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1552.366508] binder: 27861:27862 got transaction with invalid data ptr
[ 1552.375263] Sensor A: =================  START STATUS  =================
[ 1552.377352] binder: 27861:27862 transaction failed 29201/-14, size 8192-0 line 3053
09:25:17 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x300, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:25:17 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00 '], 0x0, 0x0, 0x0})

09:25:17 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

[ 1552.418350] binder: undelivered TRANSACTION_ERROR: 29201
[ 1552.434038] Sensor A: Test Pattern: 75% Colorbar
[ 1552.448714] Sensor A: Vertical Flip: false
[ 1552.477272] Sensor A: Horizontal Flip: false
[ 1552.507699] Sensor A: Brightness: 128
[ 1552.524789] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:25:17 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00 '], 0x0, 0x0, 0x0})

[ 1552.554917] Sensor A: Contrast: 128
[ 1552.572128] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1552.575083] Sensor A: Hue: 0
09:25:17 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x500, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1552.611346] Sensor A: Saturation: 128
[ 1552.626165] Sensor A: ==================  END STATUS  ==================
09:25:17 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00\x00 '], 0x0, 0x0, 0x0})

[ 1552.675667] Sensor A: =================  START STATUS  =================
[ 1552.710202] Sensor A: Test Pattern: 75% Colorbar
[ 1552.736693] Sensor A: Vertical Flip: false
[ 1552.757710] Sensor A: Horizontal Flip: false
[ 1552.769683] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1552.787367] Sensor A: Brightness: 128
[ 1552.791739] Sensor A: Contrast: 128
[ 1552.799010] Sensor A: Hue: 0
[ 1552.802491] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1552.811878] Sensor A: Saturation: 128
[ 1552.816290] Sensor A: ==================  END STATUS  ==================
09:25:18 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x440, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@hyper})
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000100))
connect$vsock_dgram(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
tkill(r0, 0x1004000000016)

09:25:18 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00 '], 0x0, 0x0, 0x0})

09:25:18 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x600, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1553.237614] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1553.253451] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:25:18 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

09:25:18 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2099800]})

09:25:18 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00\x00 '], 0x0, 0x0, 0x0})

09:25:18 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x700, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:25:18 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x80, 0x0)
ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000080)='team0\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = dup2(r2, r2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

09:25:18 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x2000, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1553.432935] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1553.461943] Sensor A: =================  START STATUS  =================
09:25:18 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff000000002000010000000104000000000000030000000000000000000000001200000300000000000000ee0a000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

[ 1553.482454] binder_transaction: 4 callbacks suppressed
[ 1553.482463] binder: 27936:27938 got transaction with invalid data ptr
[ 1553.510582] Sensor A: Test Pattern: 75% Colorbar
[ 1553.535663] Sensor A: Vertical Flip: false
[ 1553.551702] Sensor A: Horizontal Flip: false
[ 1553.561045] binder_transaction: 4 callbacks suppressed
[ 1553.561063] binder: 27936:27938 transaction failed 29201/-14, size 8192-0 line 3053
[ 1553.578384] Sensor A: Brightness: 128
09:25:18 executing program 0:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x20000, 0x0)
ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000140))
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
set_tid_address(&(0x7f0000000180))
write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[], 0x0)
execveat(r1, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x1000)
lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="737973616ebeb88d"], &(0x7f00000000c0)='lo\x00', 0x3, 0x2)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

[ 1553.587029] Sensor A: Contrast: 128
[ 1553.596003] Sensor A: Hue: 0
[ 1553.601737] Sensor A: Saturation: 128
[ 1553.616887] Sensor A: ==================  END STATUS  ==================
09:25:18 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x00\x00 '], 0x0, 0x0, 0x0})

[ 1553.679130] Sensor A: =================  START STATUS  =================
[ 1553.696468] binder_release_work: 4 callbacks suppressed
[ 1553.696476] binder: undelivered TRANSACTION_ERROR: 29201
[ 1553.724846] Sensor A: Test Pattern: 75% Colorbar
[ 1553.744112] Sensor A: Vertical Flip: false
[ 1553.765412] Sensor A: Horizontal Flip: false
[ 1553.792753] Sensor A: Brightness: 128
[ 1553.811375] Sensor A: Contrast: 128
[ 1553.831791] Sensor A: Hue: 0
[ 1553.837176] binder: 27966:27967 got transaction with invalid data ptr
[ 1553.846961] Sensor A: Saturation: 128
[ 1553.855175] Sensor A: ==================  END STATUS  ==================
[ 1553.867191] binder: 27966:27967 transaction failed 29201/-14, size 8192-0 line 3053
[ 1553.972658] binder: undelivered TRANSACTION_ERROR: 29201
[ 1554.663850] device bridge_slave_1 left promiscuous mode
[ 1554.669511] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1554.677329] device bridge_slave_0 left promiscuous mode
[ 1554.683317] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1554.740084] device hsr_slave_1 left promiscuous mode
[ 1554.755267] device hsr_slave_0 left promiscuous mode
[ 1554.766165] team0 (unregistering): Port device team_slave_1 removed
[ 1554.779877] team0 (unregistering): Port device team_slave_0 removed
[ 1554.791432] bond0 (unregistering): Releasing backup interface bond_slave_1
[ 1554.804620] bond0 (unregistering): Releasing backup interface bond_slave_0
[ 1554.861087] bond0 (unregistering): Released all slaves
09:25:21 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3099800]})

09:25:21 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)
r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xee70, 0x2000)
write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4)

09:25:21 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x440, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@hyper})
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000100))
connect$vsock_dgram(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
tkill(r0, 0x1004000000016)

09:25:21 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x3f00, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:25:21 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
r4 = dup2(r1, r1)
r5 = getpid()
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000001c0)={<r6=>0x0, @in6={{0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xff}}, 0x6, 0x3, 0x9, 0x3, 0x5}, &(0x7f0000000140)=0x98)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000340)={r6, 0xad}, &(0x7f0000000380)=0x8)
sched_setaffinity(r5, 0x8, &(0x7f0000000100)=0x81)
syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x10001)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r4, 0x400443c9, &(0x7f00000000c0)={{0x8, 0x5, 0x100000001, 0x80000000006, 0x761a7e5d, 0x9}, 0x8})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

09:25:21 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00\x00 '], 0x0, 0x0, 0x0})

09:25:21 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x400, 0x0)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f3600f8000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000503000000000000000000000000000000"], 0x58)
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

[ 1556.263681] Sensor A: =================  START STATUS  =================
[ 1556.297317] binder: 27973:27977 got transaction with invalid data ptr
[ 1556.328919] Sensor A: Test Pattern: 75% Colorbar
[ 1556.334186] binder: 27973:27977 transaction failed 29201/-14, size 8192-0 line 3053
[ 1556.342674] Sensor A: Vertical Flip: false
[ 1556.347332] Sensor A: Horizontal Flip: false
[ 1556.363385] Sensor A: Brightness: 128
09:25:21 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x0)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x20000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000080)={{0x1ff}, {0x3, 0x3}, 0x8, 0x1, 0x9})

[ 1556.377375] Sensor A: Contrast: 128
[ 1556.385735] Sensor A: Hue: 0
[ 1556.393173] Sensor A: Saturation: 128
09:25:21 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xfffffffffffffffd, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

09:25:21 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z\x00\x00 '], 0x0, 0x0, 0x0})

[ 1556.427245] Sensor A: ==================  END STATUS  ==================
[ 1556.434544] binder: undelivered TRANSACTION_ERROR: 29201
[ 1556.509001] Sensor A: =================  START STATUS  =================
[ 1556.535453] Sensor A: Test Pattern: 75% Colorbar
[ 1556.548750] binder: 28004:28007 got transaction with invalid data ptr
09:25:21 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYPTR, @ANYRES32=r0], 0xfffffffffffffcb2)
r1 = fcntl$dupfd(r0, 0x406, r0)
write$vnet(r1, &(0x7f0000000300)={0x1, {&(0x7f0000000080)=""/255, 0xff, &(0x7f0000000180)=""/229, 0x3, 0x3}}, 0x68)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000280)={'icmp6\x00'}, &(0x7f0000000380)=0x1e)

[ 1556.561489] Sensor A: Vertical Flip: false
[ 1556.570118] binder: 28004:28007 transaction failed 29201/-14, size 8192-0 line 3053
[ 1556.575895] IPVS: ftp: loaded support on port[0] = 21
[ 1556.583768] Sensor A: Horizontal Flip: false
[ 1556.612121] Sensor A: Brightness: 128
[ 1556.626519] Sensor A: Contrast: 128
[ 1556.641211] Sensor A: Hue: 
[ 1556.641226] 0
[ 1556.654218] Sensor A: Saturation: 128
09:25:21 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000040)='\x00', 0x2)
write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="64bd72eb2a349b2011b0", @ANYRESDEC=r0]], 0x8)
execveat(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

[ 1556.675401] Sensor A: ==================  END STATUS  ==================
[ 1556.711000] binder: undelivered TRANSACTION_ERROR: 29201
09:25:21 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14099800]})

09:25:21 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000000000120"], 0x0, 0x0, 0x0})

[ 1556.835147] binder: 28035:28036 got transaction with invalid data ptr
[ 1556.879487] binder: 28035:28036 transaction failed 29201/-14, size 8193-0 line 3053
[ 1556.917077] Sensor A: =================  START STATUS  =================
[ 1556.930924] Sensor A: Test Pattern: 75% Colorbar
[ 1556.936688] binder: undelivered TRANSACTION_ERROR: 29201
[ 1556.942463] Sensor A: Vertical Flip: false
[ 1556.960731] Sensor A: Horizontal Flip: false
[ 1556.966051] Sensor A: Brightness: 128
[ 1556.970030] Sensor A: Contrast: 128
[ 1556.975198] Sensor A: Hue: 0
[ 1556.981826] Sensor A: Saturation: 128
[ 1556.987735] chnl_net:caif_netlink_parms(): no params data found
[ 1556.992201] Sensor A: ==================  END STATUS  ==================
[ 1557.014554] Sensor A: =================  START STATUS  =================
[ 1557.022198] Sensor A: Test Pattern: 75% Colorbar
[ 1557.027687] Sensor A: Vertical Flip: false
[ 1557.032104] Sensor A: Horizontal Flip: false
[ 1557.037659] Sensor A: Brightness: 128
[ 1557.041617] Sensor A: Contrast: 128
[ 1557.046045] Sensor A: Hue: 0
[ 1557.049207] Sensor A: Saturation: 128
[ 1557.053736] Sensor A: ==================  END STATUS  ==================
[ 1557.110755] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1557.117474] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1557.125286] device bridge_slave_0 entered promiscuous mode
[ 1557.132416] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1557.139066] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1557.146665] device bridge_slave_1 entered promiscuous mode
[ 1557.165557] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 1557.175266] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 1557.196175] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 1557.203808] team0: Port device team_slave_0 added
[ 1557.209468] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 1557.217502] team0: Port device team_slave_1 added
[ 1557.222888] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 1557.230206] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 1557.253202] device hsr_slave_0 entered promiscuous mode
[ 1557.258868] device hsr_slave_1 entered promiscuous mode
[ 1557.265322] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 1557.272305] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 1557.288587] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1557.295008] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1557.301603] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1557.308037] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1557.365392] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[ 1557.371492] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1557.381007] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 1557.392514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1557.400762] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1557.408175] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1557.416236] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 1557.430445] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 1557.436920] 8021q: adding VLAN 0 to HW filter on device team0
[ 1557.448082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1557.455913] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1557.462246] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1557.475943] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1557.483867] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1557.490210] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1557.505565] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1557.514356] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1557.526023] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1557.541327] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1557.551405] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1557.561999] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1557.569502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1557.577668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1557.585514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1557.601365] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[ 1557.614938] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1557.663901] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:25:24 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000000000220"], 0x0, 0x0, 0x0})

09:25:24 executing program 0:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x20f81, 0x0)
ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000240)={0x7, 0xe8, 0x7, 0xfa, &(0x7f0000000080)=""/250, 0x84, &(0x7f0000000300)=""/132, 0x21, &(0x7f00000003c0)=""/159})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[], 0x0)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000180)={0x0, @aes256, 0x1, "dd3b1f5f96100bd4"})
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

09:25:24 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x440, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@hyper})
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000100))
connect$vsock_dgram(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
tkill(r0, 0x1004000000016)

09:25:24 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15099800]})

09:25:24 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
prctl$PR_SET_KEEPCAPS(0x8, 0x0)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)
ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f00000000c0)=""/130)

09:25:24 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x4000, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:25:24 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x7e, 0x0)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x80000000000, 0x400000)
syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3d6ae612, 0x101000)
r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x7fff, 0x4000)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, 0x0)

[ 1559.327911] Sensor A: =================  START STATUS  =================
[ 1559.346118] binder: 28058:28062 got transaction with invalid data ptr
[ 1559.346657] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1559.362725] Sensor A: Test Pattern: 75% Colorbar
[ 1559.369114] binder: 28058:28062 transaction failed 29201/-14, size 8194-0 line 3053
[ 1559.393801] Sensor A: Vertical Flip: false
[ 1559.398295] Sensor A: Horizontal Flip: false
[ 1559.403486] Sensor A: Brightness: 128
[ 1559.423949] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1559.427458] Sensor A: Contrast: 128
09:25:24 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000240)={'vcan0\x00', <r4=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000340)={@dev={0xfe, 0x80, [], 0x10}, r4}, 0x14)
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

09:25:24 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x6000, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:25:24 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000000000320"], 0x0, 0x0, 0x0})

09:25:24 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c46000085fa4a1bfd7148bd000001800000003807000000000000e8ff0008000020000100000000040000000000000300d29a3534ef030000000000000012471ab3e4fde9e3000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x480000, 0x0)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x103801, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, 0x0)
syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x6, 0x400000000107000)

[ 1559.462917] Sensor A: Hue: 0
[ 1559.466157] Sensor A: Saturation: 128
[ 1559.487850] binder: undelivered TRANSACTION_ERROR: 29201
[ 1559.503825] Sensor A: ==================  END STATUS  ==================
[ 1559.565359] Sensor A: =================  START STATUS  =================
[ 1559.586054] binder: 28095:28097 got transaction with invalid data ptr
[ 1559.621197] Sensor A: Test Pattern: 75% Colorbar
[ 1559.628417] Sensor A: Vertical Flip: false
[ 1559.628468] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1559.640517] binder: 28095:28097 transaction failed 29201/-14, size 8195-0 line 3053
[ 1559.650362] Sensor A: Horizontal Flip: false
[ 1559.659611] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:25:24 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x6)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = getpgrp(0x0)
r4 = getpgrp(0xffffffffffffffff)
setpgid(r3, r4)
r5 = semget(0x1, 0x3, 0x1)
stat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
getgroups(0x4, &(0x7f0000000140)=[0x0, <r7=>0x0, 0xee00, 0xee01])
r8 = getuid()
r9 = getegid()
semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000340)={{0x6, r6, r7, r8, r9, 0x90, 0x1}, 0x5, 0x400})
r10 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

09:25:24 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0xff00, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1559.664249] Sensor A: Brightness: 128
[ 1559.680344] Sensor A: Contrast: 128
[ 1559.700834] Sensor A: Hue: 0
[ 1559.713596] Sensor A: Saturation: 128
09:25:24 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f470000000000003800000000000000e8ff00000000200001000000010400000000000003000000000000000000001d0012000003000000000000000000000000000000d5e6768179c9421938be52ee604b81415746db0f3e87a925f9aa5c88da8edf155dbd8d2f8af2d6"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040))
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)
r1 = socket(0x2, 0x80000, 0x5)
setsockopt$inet6_int(r1, 0x29, 0x5a, &(0x7f0000000080), 0x4)

[ 1559.736526] Sensor A: ==================  END STATUS  ==================
[ 1559.809823] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1559.823195] binder: undelivered TRANSACTION_ERROR: 29201
[ 1559.861087] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:25:27 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000000000420"], 0x0, 0x0, 0x0})

09:25:27 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x40, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000100)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x20)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r4 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

09:25:27 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x440, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@hyper})
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:25:27 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ffffff]})

09:25:27 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100008d2bc83a000104000000000000030000000000000000000000001200000300000000000000000000000b8bb562756ac814e56b4072edbeb6c418d5c4a354"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

09:25:27 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x1000000, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1562.388639] binder: 28139:28141 got transaction with invalid data ptr
[ 1562.417464] Sensor A: =================  START STATUS  =================
[ 1562.425695] binder: 28139:28141 transaction failed 29201/-14, size 8196-0 line 3053
09:25:27 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xb1, 0x2)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x20000, 0x0)
ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000100)={0x1, 0x7ff, {0x10, 0x18, 0x13, 0x1b, 0x7, 0x3, 0x2, 0x8, 0xffffffffffffffff}})
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

[ 1562.433291] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:25:27 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000005ec0)='/dev/loop-control\x00', 0x101000, 0x0)
flock(r0, 0x200004000000002)
r1 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
r3 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0xa9)
r4 = dup2(r2, r1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x40000000, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)
r5 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9)
r6 = add_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)="5b87be1722a5f61446e2ce52a711d5e07a9adccdd2680eee09670679a7164a945344e5434ce5b65d7d277e626ae7b8cb9bae0336477d387c7a76737f2cf0d6233f0efeeed8e9c97ffe1bd1e2ae69d98791e71e32826c8e30685c9ad6daa45be63a37f24a31b93bffaa876a833be8cccc2b628bcea8e0494238b7052f6963f106b894cdc5559699634202076df4d4c070b7e16c5de9da8930ec327334e69f55da5fcf5053cb861be5e48c8bac2c3bb200ba3e97a7141b8ec69ad5ca6546f331f29b5bdfe432d692342f287514e4b7afab", 0xd0, 0xfffffffffffffffc)
keyctl$reject(0x13, r5, 0xbd0b, 0x0, r6)
acct(&(0x7f00000003c0)='./file0\x00')

[ 1562.461239] Sensor A: Test Pattern: 75% Colorbar
[ 1562.473418] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:25:27 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000000000520"], 0x0, 0x0, 0x0})

[ 1562.506236] Sensor A: Vertical Flip: false
[ 1562.521060] Sensor A: Horizontal Flip: false
[ 1562.529333] binder: undelivered TRANSACTION_ERROR: 29201
09:25:27 executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0)
ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f0000000100)={{0x7, @name="1db8ceffaa243d5fa04018603ede1f7f36f02c027cb2086c08e32968c83847bd"}, 0x8, 0x1, 0x401})
clone(0x2000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='.\x00', r2}, 0x10)
r4 = getpid()
fcntl$setown(r3, 0x8, r4)
write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

[ 1562.560225] Sensor A: Brightness: 128
[ 1562.567830] binder: 28166:28168 got transaction with invalid data ptr
[ 1562.592917] binder: 28166:28168 transaction failed 29201/-14, size 8197-0 line 3053
09:25:27 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1562.615055] Sensor A: Contrast: 128
[ 1562.632689] Sensor A: Hue: 0
[ 1562.653782] Sensor A: Saturation: 128
09:25:27 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x0, 0x0)
setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000100)=0x2, 0x4)
r1 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r6 = dup2(r2, r1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)
epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r3)

[ 1562.676561] Sensor A: ==================  END STATUS  ==================
09:25:27 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x440, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@hyper})
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x0})
connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1562.726493] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1562.750968] Sensor A: =================  START STATUS  =================
09:25:27 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000000000620"], 0x0, 0x0, 0x0})

[ 1562.782291] Sensor A: Test Pattern: 75% Colorbar
[ 1562.788822] binder: undelivered TRANSACTION_ERROR: 29201
[ 1562.791754] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:25:27 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x3000000, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1562.831879] Sensor A: Vertical Flip: false
[ 1562.837859] Sensor A: Horizontal Flip: false
[ 1562.851040] Sensor A: Brightness: 128
[ 1562.851121] Sensor A: Contrast: 128
[ 1562.851137] Sensor A: Hue: 0
[ 1562.851205] Sensor A: Saturation: 128
[ 1562.851222] Sensor A: ==================  END STATUS  ==================
[ 1562.880774] binder: 28193:28194 got transaction with invalid data ptr
09:25:27 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]})

09:25:27 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1000001)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

[ 1562.902817] binder: 28193:28194 transaction failed 29201/-14, size 8198-0 line 3053
09:25:27 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x440, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@hyper})
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x0})
connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:25:27 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a '], 0x0, 0x0, 0x0})

09:25:27 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x2000000000000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
fanotify_init(0x8, 0x400)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x3}, {0xffffffffffffff01}, @connect}], 0x30)

[ 1563.012864] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1563.021851] binder: undelivered TRANSACTION_ERROR: 29201
[ 1563.039154] Sensor A: =================  START STATUS  =================
[ 1563.081595] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1563.118400] Sensor A: Test Pattern: 75% Colorbar
09:25:28 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\'\xa2\x95,\x1cn\f@\x05\x06\xa7H\x16?yA\x8e\xb4`\x89w\x95\x16\x94k\xeay\x13\x7f\"\xbd!sf\xf1\xad\xe0r\x97', 0x1)
io_setup(0xffff, &(0x7f0000000000))
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

[ 1563.134809] binder: 28216:28218 got transaction with invalid data ptr
[ 1563.145300] Sensor A: Vertical Flip: false
[ 1563.171931] Sensor A: Horizontal Flip: false
09:25:28 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x440, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@hyper})
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x0})
connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1563.179961] binder: 28216:28218 transaction failed 29201/-14, size 8199-0 line 3053
09:25:28 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x4000000, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1563.227685] Sensor A: Brightness: 128
09:25:28 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1874, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x2000000000}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xc972)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x300, 0x0)
ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000100)={0x800, 0x4e5, 0x9, 0xfffffffffffffbff})
r4 = dup2(r0, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x0, @time, {0x0, 0x400}, {}, @queue={0x200, {0x1, 0x2}}}], 0xfffffce2)

[ 1563.261740] Sensor A: Contrast: 128
[ 1563.278084] Sensor A: Hue: 0
[ 1563.292054] Sensor A: Saturation: 128
09:25:28 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n '], 0x0, 0x0, 0x0})

[ 1563.313521] Sensor A: ==================  END STATUS  ==================
[ 1563.327580] binder: undelivered TRANSACTION_ERROR: 29201
09:25:28 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x440, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@hyper})
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1563.364600] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1563.366556] Sensor A: =================  START STATUS  =================
09:25:28 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x5000000, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1563.423325] Sensor A: Test Pattern: 75% Colorbar
[ 1563.428143] Sensor A: Vertical Flip: false
[ 1563.444829] binder: 28239:28241 got transaction with invalid data ptr
[ 1563.451565] binder: 28239:28241 transaction failed 29201/-14, size 8202-0 line 3053
[ 1563.499731] Sensor A: Horizontal Flip: false
[ 1563.523027] Sensor A: Brightness: 128
[ 1563.526915] Sensor A: Contrast: 128
[ 1563.530556] Sensor A: Hue: 0
[ 1563.570545] Sensor A: Saturation: 128
[ 1563.577323] Sensor A: ==================  END STATUS  ==================
[ 1563.601366] binder: undelivered TRANSACTION_ERROR: 29201
09:25:28 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]})

09:25:28 executing program 0:
clone(0x2100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000000000000000000000"], 0x58)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000080)=0x6, 0x1)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

09:25:28 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000000001220"], 0x0, 0x0, 0x0})

09:25:28 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x440, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@hyper})
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1563.617637] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1563.658197] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1563.693487] binder: 28252:28256 got transaction with invalid data ptr
[ 1563.711749] binder: 28252:28256 transaction failed 29201/-14, size 8210-0 line 3053
[ 1563.729311] Sensor A: =================  START STATUS  =================
09:25:28 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x6000000, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1563.776206] Sensor A: Test Pattern: 75% Colorbar
09:25:28 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00  '], 0x0, 0x0, 0x0})

[ 1563.821115] binder: undelivered TRANSACTION_ERROR: 29201
[ 1563.828051] Sensor A: Vertical Flip: false
[ 1563.844665] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1563.857938] Sensor A: Horizontal Flip: false
09:25:28 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x440, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@hyper})
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1563.880152] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1563.890211] Sensor A: Brightness: 128
[ 1563.913731] binder: 28273:28274 got transaction with invalid data ptr
[ 1563.925102] Sensor A: Contrast: 128
09:25:28 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x7000000, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1563.936887] binder: 28273:28274 transaction failed 29201/-14, size 8224-0 line 3053
[ 1563.946998] Sensor A: Hue: 0
[ 1563.967329] Sensor A: Saturation: 128
[ 1563.985710] Sensor A: ==================  END STATUS  ==================
[ 1564.039989] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1564.071412] binder: undelivered TRANSACTION_ERROR: 29201
[ 1564.077285] Sensor A: =================  START STATUS  =================
[ 1564.093137] Sensor A: Test Pattern: 75% Colorbar
[ 1564.098091] Sensor A: Vertical Flip: false
[ 1564.102493] Sensor A: Horizontal Flip: false
[ 1564.130345] Sensor A: Brightness: 128
[ 1564.140146] Sensor A: Contrast: 128
[ 1564.159773] Sensor A: Hue: 0
[ 1564.171833] Sensor A: Saturation: 128
[ 1564.176734] Sensor A: ==================  END STATUS  ==================
09:25:29 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r4, 0xc0845658, &(0x7f00000000c0)={0x0, @bt={0x10001, 0x1, 0x1, 0x0, 0x3, 0xfff, 0x9, 0x7fff, 0x2, 0x3, 0x894, 0x4, 0xfffffffffffffffe, 0x0, 0x2, 0x12}})
ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f00000001c0)="8e6f4fabffacd556d63cc2a24685b4fcc844bde281b7a2cf6a8cd09a593ec527cac975b4852bf16fa340beff908925648da4c8c0ad3d793bc7f8ac4774b29c395711d7bb3a0eb4be3df8ae426ffe563f324bdc42bccf463dcfc13b21f1d2b1c565535cd948369dc0896febc91b7cc89e29c570a53c887213c16b3c7c77840388f8a3b1")
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

09:25:29 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

09:25:29 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x7fffffe, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:25:29 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x440, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@hyper})
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:25:29 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe7]})

09:25:29 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H '], 0x0, 0x0, 0x0})

[ 1564.277682] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1564.293462] binder: 28298:28299 got transaction with invalid data ptr
[ 1564.300129] binder: 28298:28299 transaction failed 29201/-14, size 8264-0 line 3053
09:25:29 executing program 0:
r0 = syz_open_dev$admmidi(&(0x7f0000000340)='/dev/admmidi#\x00', 0x2, 0x100)
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000080)={'mangle\x00', 0x8d, "06b061d8279064d3103e20eaccef745f6d36d3b3509f070d7ce6e6452be7415c374585be94c77d5c0b685c7a4234e9917c110c36007fd8975d7e2237a62fdf365cb47c850e897638240ae32640064a2f78558c68db9bd4baaf87518e356586b676f454053baf90f9ae512ac8f689a8d0f01e074d4fdd61dc0c95d9400176032e49fec3a99e4f78d0b658de30d3"}, &(0x7f0000000140)=0xb1)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = memfd_create(&(0x7f00000002c0)='\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00', 0xfffffffffffffffd)
write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

09:25:29 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x20000000, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:25:29 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x440, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@hyper})
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1564.324717] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1564.356906] Sensor A: =================  START STATUS  =================
[ 1564.419534] Sensor A: Test Pattern: 75% Colorbar
09:25:29 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L '], 0x0, 0x0, 0x0})

09:25:29 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})

[ 1564.457085] Sensor A: Vertical Flip: false
[ 1564.463600] binder: undelivered TRANSACTION_ERROR: 29201
[ 1564.489232] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1564.531289] Sensor A: Horizontal Flip: false
[ 1564.549221] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1564.569034] binder: 28323:28325 got transaction with invalid data ptr
[ 1564.576736] Sensor A: Brightness: 128
09:25:29 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:25:29 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x440, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@hyper})
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1564.587496] Sensor A: Contrast: 128
[ 1564.602220] Sensor A: Hue: 0
[ 1564.612762] binder: 28323:28325 transaction failed 29201/-14, size 8268-0 line 3053
[ 1564.622889] Sensor A: Saturation: 128
09:25:29 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = dup2(r0, r0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x8c, r2, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6d}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x59e6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x1}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x13, 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x4044)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = dup2(0xffffffffffffffff, r0)
ioctl$VIDIOC_SUBDEV_S_CROP(r4, 0xc038563c, &(0x7f00000000c0)={0x0, 0x0, {0x2287, 0x3, 0x1, 0x1}})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

[ 1564.645394] Sensor A: ==================  END STATUS  ==================
[ 1564.677073] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1564.748478] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:25:29 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9980000000000]})

09:25:29 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00` '], 0x0, 0x0, 0x0})

09:25:29 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x40000000, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1564.788669] binder: undelivered TRANSACTION_ERROR: 29201
09:25:29 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x440, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1564.853782] Sensor A: =================  START STATUS  =================
[ 1564.907069] Sensor A: Test Pattern: 75% Colorbar
[ 1564.911937] Sensor A: Vertical Flip: false
[ 1564.927037] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1564.941919] binder: 28351:28354 got transaction with invalid data ptr
[ 1564.946223] Sensor A: Horizontal Flip: false
[ 1564.969769] Sensor A: Brightness: 128
[ 1564.971117] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1564.982461] binder: 28351:28354 transaction failed 29201/-14, size 8288-0 line 3053
[ 1564.984542] Sensor A: Contrast: 128
[ 1565.043559] Sensor A: Hue: 0
[ 1565.050283] Sensor A: Saturation: 128
[ 1565.060915] Sensor A: ==================  END STATUS  ==================
[ 1565.083591] binder: undelivered TRANSACTION_ERROR: 29201
09:25:30 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h '], 0x0, 0x0, 0x0})

09:25:30 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x10000, 0x101000)
ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000180)=""/52)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

09:25:30 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x60000000, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:25:30 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f00000000000]})

09:25:30 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:25:30 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100001)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

09:25:30 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0xfeffff07, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1565.703290] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1565.757816] binder: 28369:28379 got transaction with invalid data ptr
[ 1565.773265] Sensor A: =================  START STATUS  =================
[ 1565.791235] binder: 28369:28379 transaction failed 29201/-14, size 8296-0 line 3053
[ 1565.792727] Sensor A: Test Pattern: 75% Colorbar
09:25:30 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l '], 0x0, 0x0, 0x0})

[ 1565.837305] Sensor A: Vertical Flip: false
[ 1565.847583] Sensor A: Horizontal Flip: false
[ 1565.858846] Sensor A: Brightness: 128
[ 1565.868862] Sensor A: Contrast: 128
09:25:30 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)
socket$inet6_udplite(0xa, 0x2, 0x88)

09:25:30 executing program 4:
r0 = gettid()
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1565.882724] binder: undelivered TRANSACTION_ERROR: 29201
[ 1565.937655] Sensor A: Hue: 0
[ 1565.940540] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1565.962787] Sensor A: Saturation: 128
[ 1565.985641] Sensor A: ==================  END STATUS  ==================
09:25:30 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0xff000000, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1566.022270] Sensor A: =================  START STATUS  =================
[ 1566.023363] binder: 28394:28395 got transaction with invalid data ptr
[ 1566.036523] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1566.037230] Sensor A: Test Pattern: 75% Colorbar
[ 1566.060356] IPVS: ftp: loaded support on port[0] = 21
[ 1566.067558] Sensor A: Vertical Flip: false
[ 1566.085257] Sensor A: Horizontal Flip: false
[ 1566.095731] binder: 28394:28395 transaction failed 29201/-14, size 8300-0 line 3053
[ 1566.108526] Sensor A: Brightness: 128
[ 1566.115581] Sensor A: Contrast: 128
[ 1566.127612] Sensor A: Hue: 0
[ 1566.131349] Sensor A: Saturation: 128
[ 1566.136067] Sensor A: ==================  END STATUS  ==================
[ 1566.174707] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:25:31 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t '], 0x0, 0x0, 0x0})

09:25:31 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]})

[ 1566.208426] binder: undelivered TRANSACTION_ERROR: 29201
[ 1566.269070] Sensor A: =================  START STATUS  =================
[ 1566.317653] binder: 28412:28413 got transaction with invalid data ptr
[ 1566.341689] Sensor A: Test Pattern: 75% Colorbar
[ 1566.362783] binder: 28412:28413 transaction failed 29201/-14, size 8308-0 line 3053
[ 1566.376755] Sensor A: Vertical Flip: false
[ 1566.396736] Sensor A: Horizontal Flip: false
[ 1566.407453] Sensor A: Brightness: 128
[ 1566.411701] binder: undelivered TRANSACTION_ERROR: 29201
[ 1566.440404] Sensor A: Contrast: 128
[ 1566.445048] Sensor A: Hue: 0
[ 1566.448239] Sensor A: Saturation: 128
[ 1566.454997] Sensor A: ==================  END STATUS  ==================
[ 1566.478494] Sensor A: =================  START STATUS  =================
[ 1566.501042] Sensor A: Test Pattern: 75% Colorbar
[ 1566.506133] device bridge_slave_1 left promiscuous mode
[ 1566.516177] Sensor A: Vertical Flip: false
[ 1566.519618] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1566.526870] Sensor A: Horizontal Flip: false
[ 1566.531444] Sensor A: Brightness: 128
[ 1566.535747] Sensor A: Contrast: 128
[ 1566.539615] Sensor A: Hue: 0
[ 1566.543195] Sensor A: Saturation: 128
[ 1566.547154] Sensor A: ==================  END STATUS  ==================
[ 1566.565266] device bridge_slave_0 left promiscuous mode
[ 1566.570964] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1566.706032] device hsr_slave_1 left promiscuous mode
[ 1566.747721] device hsr_slave_0 left promiscuous mode
[ 1566.797985] team0 (unregistering): Port device team_slave_1 removed
[ 1566.810224] team0 (unregistering): Port device team_slave_0 removed
[ 1566.823400] bond0 (unregistering): Releasing backup interface bond_slave_1
[ 1566.897392] bond0 (unregistering): Releasing backup interface bond_slave_0
[ 1567.000299] bond0 (unregistering): Released all slaves
[ 1567.179624] chnl_net:caif_netlink_parms(): no params data found
[ 1567.221684] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1567.228782] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1567.236315] device bridge_slave_0 entered promiscuous mode
[ 1567.243774] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1567.250194] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1567.257299] device bridge_slave_1 entered promiscuous mode
[ 1567.279401] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 1567.288745] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 1567.318756] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 1567.326310] team0: Port device team_slave_0 added
[ 1567.331653] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 1567.339047] team0: Port device team_slave_1 added
[ 1567.344513] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 1567.351810] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 1567.395678] device hsr_slave_0 entered promiscuous mode
[ 1567.453009] device hsr_slave_1 entered promiscuous mode
[ 1567.503365] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 1567.510406] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 1567.556115] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1567.562470] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1567.569193] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1567.575603] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1567.613625] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[ 1567.619716] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1567.629760] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 1567.648015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1567.659122] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1567.670649] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1567.687893] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 1567.704602] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 1567.710684] 8021q: adding VLAN 0 to HW filter on device team0
[ 1567.732062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1567.748792] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1567.755242] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1567.783698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1567.791710] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1567.798178] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1567.814601] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1567.823723] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1567.840092] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1567.850773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1567.871212] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1567.878619] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1567.887265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1567.895902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1567.910893] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[ 1567.918674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1567.935006] 8021q: adding VLAN 0 to HW filter on device batadv0
09:25:32 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000350000000000000800000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

09:25:32 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:25:32 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z '], 0x0, 0x0, 0x0})

09:25:32 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
r3 = syz_open_dev$vivid(&(0x7f00000000c0)='/dev/video#\x00', 0x1, 0x2)
ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000100)={0x9, {0xffffffffffffffff, 0x1, 0x8, 0x7dd}, {0x40, 0x180000, 0x5, 0x4}, {0x101, 0x6}})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r4 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
r5 = getpgrp(0x0)
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000440)={{{@in=@local, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8)
r7 = getegid()
setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={r5, r6, r7}, 0xc)
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

09:25:32 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100980000000000]})

09:25:33 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1568.073687] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1568.096329] Sensor A: =================  START STATUS  =================
[ 1568.128815] Sensor A: Test Pattern: 75% Colorbar
[ 1568.154509] Sensor A: Vertical Flip: false
[ 1568.158779] Sensor A: Horizontal Flip: false
[ 1568.160547] binder: 28436:28437 got transaction with invalid data ptr
[ 1568.187999] Sensor A: Brightness: 128
[ 1568.191830] Sensor A: Contrast: 128
[ 1568.195456] binder: 28436:28437 transaction failed 29201/-14, size 8314-0 line 3053
09:25:33 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x682098e0, 0x80)
r1 = fcntl$dupfd(r0, 0x406, r0)
execveat(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

[ 1568.209865] Sensor A: Hue: 0
[ 1568.222846] Sensor A: Saturation: 128
[ 1568.226850] Sensor A: ==================  END STATUS  ==================
09:25:33 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
clock_gettime(0x0, &(0x7f0000000100)={<r4=>0x0, <r5=>0x0})
write$sndseq(r1, &(0x7f0000000540)=[{0x7, 0x1, 0x1e, 0x2, @time={r4, r5+30000000}, {0x400, 0x5}, {0x3, 0xffffffff}, @time=@tick=0x100000000}, {0x80, 0x57117a44, 0x2, 0x20000000, @time, {0x4}, {0x1000, 0x9}, @addr={0x2b2, 0x1f}}, {0xffff, 0x2, 0x2, 0x9, @tick=0x401, {0x2, 0x6}, {0x4, 0x1d6000000000}, @ext={0xf8, &(0x7f0000000440)="8786ad3289ba3ef65ac32c03b099f03d98ec01a4bd04064639e2ab8ac00981cd6f18545a306082880b74fdb951afeeb5e8a181b48711f6ec74e8e61d031511b09727c9c8590c5c7ebe7a3c07992285350370a503ee259096676a86c3c1832e6648ceff978e685015bd475971ca7d68eb29d42c3f77366874d5c5b591c80dcc5021eed5d0977983f66f7ec756fee5fdd15951037ab9ac441eea4345ecc992958f93791c0cca7ce0445cf5e47da4d493fb6027a489eab5ee046802cafa25ffb8d5f0c229adaeaa240005156b1758de2d03008144d52516e10a47ddc0346e9bf391b41c5f8a1069493be975a17844971807c108dd9275f5d912"}}, {0x5, 0x3, 0xc3180000000000, 0x0, @time={0x0, 0x989680}, {0x9, 0xb1}, {0x7fff, 0x100}, @control={0x4, 0x4, 0x20}}, {0x5, 0x10001, 0x5, 0x1fcd6ce2, @time={0x0, 0x989680}, {0xf40c, 0x2efc952d}, {0x1}, @note={0x4, 0x200, 0x319d, 0x1000, 0x81}}, {0x9, 0x8, 0x1, 0x5, @tick=0x2, {0x6, 0xffffffffffffffff}, {0xa9f0, 0x4}, @raw8={"9b6f55102d7c62897291d5c7"}}], 0x120)
ioctl$KVM_DIRTY_TLB(r3, 0x4010aeaa, &(0x7f00000000c0)={0x10000, 0x3800000000000})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x7, 0x7fffffff}, {0x100000000000000}, @connect}], 0x30)

[ 1568.328365] binder: undelivered TRANSACTION_ERROR: 29201
[ 1568.353349] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:25:33 executing program 4:
r0 = gettid()
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:25:33 executing program 0:
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffff9c, 0x50, &(0x7f0000000240)={0x0, <r0=>0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)=r0, 0x4)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x1f, 0x200)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f00000003c0)={<r3=>0x0, 0xffffffff}, &(0x7f0000000400)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000440)={r3, 0x100}, 0x8)
write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x100, 0x0)
syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x0, 0x2)
ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, 0x0)
r5 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x401, 0x80000)
getpeername$packet(r5, &(0x7f0000001840)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001880)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000018c0)={'team0\x00', r6})
ioctl$SG_EMULATED_HOST(r5, 0x2203, &(0x7f0000000080))
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vga_arbiter\x00', 0x1, 0x0)

09:25:33 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c000000000000000000000000000000000000fffffdfd20"], 0x0, 0x0, 0x0})

09:25:33 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100f00000000000]})

09:25:33 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:25:33 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)
clock_gettime(0x0, &(0x7f00000001c0)={<r4=>0x0, <r5=>0x0})
select(0x40, &(0x7f00000000c0)={0x7, 0x7bee, 0x4, 0x0, 0x1000000000000000, 0x7c, 0x95a2, 0x6}, &(0x7f0000000100)={0x1, 0x80000001, 0x100000001, 0x7, 0x9, 0x8000, 0x3, 0x5}, &(0x7f0000000140)={0x81, 0x7, 0xd4, 0x0, 0x1, 0x1, 0x5}, &(0x7f0000000200)={r4, r5/1000+10000})

[ 1569.065634] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1569.075358] Sensor A: =================  START STATUS  =================
[ 1569.084685] binder: 28474:28482 got transaction with invalid data ptr
[ 1569.091385] binder: 28474:28482 transaction failed 29201/-14, size 8445-0 line 3053
09:25:34 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80, 0x0)
ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000080)={0x9, 0x8, 0x0, 0x6, 0x1})

09:25:34 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1569.117394] Sensor A: Test Pattern: 75% Colorbar
[ 1569.122389] Sensor A: Vertical Flip: false
[ 1569.142758] Sensor A: Horizontal Flip: false
[ 1569.149568] Sensor A: Brightness: 128
[ 1569.177224] Sensor A: Contrast: 128
09:25:34 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c000000000000000000000000000000000000fdfdffff20"], 0x0, 0x0, 0x0})

09:25:34 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video1\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$VIDIOC_S_FBUF(r3, 0x4030560b, &(0x7f00000001c0)={0x20, 0x4, &(0x7f00000000c0)="7a795ee20cd1f73ed3a3623ce90522670256b5e6d0504faaf5e0208d95688b5e9ed14cfe915a00bdb82a9321e300f589eea42b25744f0ab79e3fa53074f1185c9579a7f357fa3d6a833341e08950246eccb63a54e57153e30107188a5ce4cfdc5b143bf2fe9d640dc59f8eed940383e0cc7744bfd6ff7d66f569abf3fd9eb1312dfb141dd8977b8d7f704d4f29d59759262376166106e275f806", {0xffffffff, 0x3, 0x67727b5d, 0xf, 0xffffffff, 0x3f, 0x1, 0x4}})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
ioctl$UI_SET_MSCBIT(r3, 0x40045568, 0x11)
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

[ 1569.202694] Sensor A: Hue: 0
[ 1569.207837] binder: undelivered TRANSACTION_ERROR: 29201
[ 1569.218176] Sensor A: Saturation: 128
[ 1569.234113] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1569.239905] Sensor A: ==================  END STATUS  ==================
[ 1569.318297] binder: 28503:28504 got transaction with invalid data ptr
09:25:34 executing program 0:
clone(0x12000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff000000002000010000000104000000000000030000000000000000000000001200004fc7dcc9000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

09:25:34 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109980000000000]})

[ 1569.360449] binder: 28503:28504 transaction failed 29201/-14, size 8447-0 line 3053
[ 1569.465567] Sensor A: =================  START STATUS  =================
[ 1569.502438] binder: undelivered TRANSACTION_ERROR: 29201
[ 1569.513550] Sensor A: Test Pattern: 75% Colorbar
[ 1569.540487] Sensor A: Vertical Flip: false
[ 1569.555322] Sensor A: Horizontal Flip: false
[ 1569.569577] Sensor A: Brightness: 128
[ 1569.580136] Sensor A: Contrast: 128
[ 1569.588439] Sensor A: Hue: 0
[ 1569.592231] Sensor A: Saturation: 128
[ 1569.596613] Sensor A: ==================  END STATUS  ==================
09:25:37 executing program 4:
r0 = gettid()
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:25:37 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:25:37 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

09:25:37 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x0, 0x0, 0x0})

09:25:37 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r1 = msgget(0x1, 0xd)
msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000040)=""/28)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

09:25:37 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]})

[ 1572.181100] Sensor A: =================  START STATUS  =================
[ 1572.183968] binder: 28534:28536 got transaction with invalid data ptr
[ 1572.209445] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1572.218529] Sensor A: Test Pattern: 75% Colorbar
09:25:37 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:25:37 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000100)={0x0, 0x1, 0x2017, 0x1})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r4 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

[ 1572.245029] binder: 28534:28536 transaction failed 29201/-14, size 2560-0 line 3053
[ 1572.245852] Sensor A: Vertical Flip: false
09:25:37 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
pipe(&(0x7f0000000040))
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x10000, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, 0x0)

[ 1572.337165] Sensor A: Horizontal Flip: false
[ 1572.341020] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1572.368966] Sensor A: Brightness: 128
09:25:37 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000002000020"], 0x0, 0x0, 0x0})

[ 1572.385815] binder: undelivered TRANSACTION_ERROR: 29201
[ 1572.399996] Sensor A: Contrast: 128
[ 1572.429723] Sensor A: Hue: 0
09:25:37 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:25:37 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
getresuid(&(0x7f0000000380), &(0x7f00000003c0)=<r4=>0x0, &(0x7f0000000440))
ioctl$sock_proto_private(r2, 0x89e7, &(0x7f0000000b80)="e6571cbcec44c51b6de1095ffa489c3b19768349d5c572027ad7a7c6de1a1589e38d97e1e87414b88265ebd98ff69a87f26f75860a48450697cbb1ab93c4e043ea7e92cf68a5d24c38")
fstat(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000500)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in=@multicast2}}, &(0x7f0000000600)=0xe8)
stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
r8 = geteuid()
lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000800)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in6=@remote}}}, &(0x7f0000000900)=0xe8)
fstat(r1, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0})
pipe2(&(0x7f00000009c0)={<r12=>0xffffffffffffffff}, 0x4800)
ioctl$EVIOCGABS3F(r12, 0x8018457f, &(0x7f0000000cc0)=""/4096)
setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f0000000c00)=ANY=[@ANYBLOB="02000000010007000000000002000100", @ANYRES32=r4, @ANYBLOB="02000500", @ANYRES32=r5, @ANYBLOB="02000100", @ANYRES32=r6, @ANYBLOB="13708c14f0d5e21f8a3da87d472322716c10a50f617f1a2719d2170321263e99d4f62c0861ec00000000000000000000", @ANYRES32=r7, @ANYBLOB="02000700", @ANYRES32=r8, @ANYBLOB="02000000", @ANYRES32=r9, @ANYBLOB="02000100", @ANYRES32=r10, @ANYBLOB="040004000000000008000200", @ANYRES32=r11, @ANYBLOB="10000300000000002000010000000000"], 0x64, 0x2)
r13 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x8202, 0x0)
ioctl$BLKREPORTZONE(r13, 0xc0101282, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"])
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000100)={<r14=>0x0, 0x3}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r13, 0x84, 0x73, &(0x7f00000001c0)={r14, 0x6, 0x30, 0x5, 0x1ff}, &(0x7f0000000200)=0x18)
r15 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r15, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

[ 1572.452959] Sensor A: Saturation: 128
[ 1572.457295] binder: 28567:28568 got transaction with invalid data ptr
[ 1572.461950] Sensor A: ==================  END STATUS  ==================
[ 1572.515919] binder: 28567:28568 transaction failed 29201/-14, size 8192-0 line 3053
[ 1572.525181] Sensor A: =================  START STATUS  =================
[ 1572.558305] Sensor A: Test Pattern: 75% Colorbar
[ 1572.584578] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1572.593370] Sensor A: Vertical Flip: false
[ 1572.604023] Sensor A: Horizontal Flip: false
[ 1572.608472] Sensor A: Brightness: 128
[ 1572.612288] Sensor A: Contrast: 128
[ 1572.643450] Sensor A: Hue: 0
[ 1572.647425] Sensor A: Saturation: 128
[ 1572.658952] Sensor A: ==================  END STATUS  ==================
[ 1572.691513] binder: undelivered TRANSACTION_ERROR: 29201
09:25:40 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='GPlet0\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
r2 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x81)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

09:25:40 executing program 4:
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(0x0, 0x1004000000016)

09:25:40 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x22080, 0x0)
ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000080))
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f00000000c0)={0x7, 0xdb, 0x100000000, 0x1})
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

09:25:40 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:25:40 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000003000020"], 0x0, 0x0, 0x0})

09:25:40 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x209980000000000]})

[ 1575.298501] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1575.301773] binder: 28592:28594 got transaction with invalid data ptr
[ 1575.330048] Sensor A: =================  START STATUS  =================
09:25:40 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1575.346005] Sensor A: Test Pattern: 75% Colorbar
[ 1575.350895] Sensor A: Vertical Flip: false
[ 1575.360522] binder: 28592:28594 transaction failed 29201/-14, size 8192-0 line 3053
[ 1575.379899] Sensor A: Horizontal Flip: false
09:25:40 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x200000, 0x0)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

[ 1575.400063] Sensor A: Brightness: 128
09:25:40 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x4, 0x2c, 0x8, 0x400000}, {0x9, 0xe16, 0x1000, 0x8a64391}]}, 0x10)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x40)

[ 1575.427571] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:25:40 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000004000020"], 0x0, 0x0, 0x0})

09:25:40 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

[ 1575.488454] Sensor A: Contrast: 128
[ 1575.503701] binder: undelivered TRANSACTION_ERROR: 29201
[ 1575.512970] Sensor A: Hue: 0
[ 1575.516208] Sensor A: Saturation: 128
09:25:40 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1575.538650] Sensor A: ==================  END STATUS  ==================
[ 1575.576321] binder: 28620:28622 got transaction with invalid data ptr
09:25:40 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x309980000000000]})

[ 1575.642339] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1575.643245] binder: 28620:28622 transaction failed 29201/-14, size 8192-0 line 3053
[ 1575.786010] Sensor A: =================  START STATUS  =================
[ 1575.793716] binder: undelivered TRANSACTION_ERROR: 29201
[ 1575.802060] Sensor A: Test Pattern: 75% Colorbar
[ 1575.811027] Sensor A: Vertical Flip: false
[ 1575.816021] Sensor A: Horizontal Flip: false
[ 1575.820480] Sensor A: Brightness: 128
[ 1575.828132] Sensor A: Contrast: 128
[ 1575.831919] Sensor A: Hue: 0
[ 1575.839792] Sensor A: Saturation: 128
[ 1575.844914] Sensor A: ==================  END STATUS  ==================
[ 1575.857392] Sensor A: =================  START STATUS  =================
[ 1575.864345] Sensor A: Test Pattern: 75% Colorbar
[ 1575.869116] Sensor A: Vertical Flip: false
[ 1575.873487] Sensor A: Horizontal Flip: false
[ 1575.877916] Sensor A: Brightness: 128
[ 1575.881717] Sensor A: Contrast: 128
[ 1575.886230] Sensor A: Hue: 0
[ 1575.889251] Sensor A: Saturation: 128
[ 1575.893158] Sensor A: ==================  END STATUS  ==================
09:25:41 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f00000000c0)={0x4, 0x25, 0x3, 0x0, 0x200000003, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000e215, 0x0, 0x0, 0x4000000000, 0x3, 0x0, 0x20000004, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xdbef, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext, 0xfffffffffffffffc, 0x1000}, 0x0, 0x80000, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = dup2(0xffffffffffffffff, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

09:25:41 executing program 4:
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(0x0, 0x1004000000016)

09:25:41 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x20940, 0x0)
syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x966f, 0x101000)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x40000, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, 0x0)

09:25:41 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:25:41 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000005000020"], 0x0, 0x0, 0x0})

09:25:41 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1409980000000000]})

[ 1576.206682] Sensor A: =================  START STATUS  =================
[ 1576.211266] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1576.240092] binder: 28651:28652 got transaction with invalid data ptr
09:25:41 executing program 0:
r0 = accept4$unix(0xffffffffffffff9c, &(0x7f0000000240), &(0x7f0000000300)=0x6e, 0x80800)
r1 = fcntl$getown(0xffffffffffffff9c, 0x9)
fcntl$setownex(r0, 0xf, &(0x7f0000000340)={0x0, r1})
r2 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x2, 0x2)
ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f0000000200)={0xa66, 0x6})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x58)
execveat(r3, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x1004)
ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000000))
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

[ 1576.251883] Sensor A: Test Pattern: 75% Colorbar
[ 1576.261542] binder: 28651:28652 transaction failed 29201/-14, size 8192-0 line 3053
[ 1576.265330] Sensor A: Vertical Flip: false
09:25:41 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0xfeffff0700000000, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:25:41 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x4, 0x111000)
ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000080))
ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000000c0))
r1 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={r0, &(0x7f0000000300)="c423fe2806b195e0731d586aa588678ff9290028576e8921f163a7cada63dec9227b2e4a9a63752a411c51253e773265ad5561782889d3e7dd2caaca5955c9b7f118917cf4d9d51d50bedd2dc463cd14c6abfc4be54ea6238238dad20a0b5b6fc592bfeee66241b802dd3ea299708f57997c74036bec4ded2e3ca8b3f6be34de5bf12222f381294a3ae6cd4d81d066dae925d86a7b34f357ba5aa02f5b8fe37ace1025020179e2bacf33c4b15f4527974fab6d3ab3fb495a5536f5227c477100358602fb312971daf7b594280612b58d3b9fa2a85ade9f20ddcb5a2de93aafed21ebf7999ec9331458afbc3ed3edceb67cc38b229fa1a2ed57882ad0de11a2512f4c84203984bec960a4e468b2befdc7523e5b474cb45f03df72a4445becafb4250ad4073731bc6ee88a2ea6f5c4d99437bec4db8c6fb454fdfcfb9fb947a60ce02cc771f6522e3ddc36f27c388e89f6cfd31ef9bf1022b67a7d2e367ee77fd24f836c9c3b11d0c43c9ce40f298158cb255c80eacb23ff7e769377049e7277582a8e06136b6a120a9d4bd582155f74832e6d31b78c5256ba3b91ce8ccec0b5c14414a4a9070204f16a5d17ff54abd5b2b7e18d5e068e6e4d6290cd5e11020c83aa39dff33104ccd3d622476cdaf1a5c6bac15237272821fb40d2f11e256f6c83558496a69b02f0bfdf8ede1b180c5bf231334bb30075264385263b2a0f5c4d62de4b6071d37cddee07e9866db0502b8f77c944256c707cdd655bedb44141b1de7bc98efc143fcb9862d3cd5552bbd452120c1277de674a584ca32feacf7018f30797d9324d725a64d2e5846e2325408828f8babf980806cef50887faa34e8e4e19cefc24ab55f195d3d3e7d4bee57678fc4facc40bc432c228e467bf73084a7b4753a61b4d414d409ac8b8b67cd1d824ad8b062f9d3e51f03747162ed7de17669cbfe925906270a77918bf93ef9bd47b6d405f89f7ae25872a452f220ab01a9b4577d073c14847702ba03267cea159a6001f3d4bdf7ef2fa0f7ed63d2b0ed001b8dce445b850725ce10d1f72ef8b4a55a92dee12da8f59ab197fbe3aaafb872a0257354d2ce330f67749d89a6f36f49c0e4c85146d1dd63324fc0c02b5215160157ac4764fde4a7492fa84f4c6f7cfed7e1e71e9dab35fa964bc00b69001a9f63e09a6b141127ba20809e202d79e2794b693ba79d3f05fb1ecfcb5637fc6776fd5ac18f34356d26772d9703ab8a116e08c751649d80a59d007771743c06e9a9c82d057e3f5c7321b4d568b5c844c9c82390b2f338a02954b3d956872fd22deb85074fcfd82cb7b2d2629c34ebd61d5e739bab9a836b218eb24a84e3d7a6e6e24ffdadd9a9bc87362240f5459a3627b3ff8c5619b97c0c6be04a2a5d1da45f983340633a8b5f2888f46e400eb9d9f92fe6eea9371980f0baeedaf9aed33a44d8e694dd6f614df81c409317e13e680ae3e0b8fb63cdb9b31928645a8e99c7cb99fd6ee3fb61839f0ac556b68e6f45be80b2267b1eb9f70d98b468418a963337a247114c40debcb723f3843d718c2ecf3db298abda726685600c94333f15f250106e017058df5b1de669b736a65b3ab55ee3919d18564c03437c2608eb27b6a8092a91b712a88a4a3bba3d4cd6afe95c1aca89548354b3f207fbf7c405bcd9c40a419133e7ca5e5666830c2038b983dab06b10b33950588997136ad24679d4cafeeb536de64fd2747ebbf0c7c0d22f1e76a74ac9ee85fcd8a9b468bcfc861eddec3939fe0afdde5016186bc5822a2b26aa60f3b36d0e707e2bfd75c13d8cab4062ebe570f24d308b684c7ac4289890720bbcfc9d7cea43967ab09385388c3001cf3b5dc037784230b5c33b9ac768af623b9be14391f350a33ff2b2ca894f5c45ca0e707ac6a3c11ccba9966f70835ae89245260269f9c45778cbef77d82144916f5325ed7e98a575ecd4aa1dea32853c10f52662b72aacce40263a7761f87040c6b68fe8f2063ae34c731475454a94a58feb01b044cdee84d0777a48a5d6ba78bffb64e468948c7e12988a17f18f9f531f737d48c126c05975364e52583510fad80b3caff77ecd8f00c4ba6e7dd08b32c3c64cb80b66f56f84f63d74f3d7cbd8d6a3bcb9093b092e8d7f1d1e85315fd6f17cec2d26bb172303ef7ee2e5644816bbb1b0c38b89c633509e99babd1399f9b3fe8780046d6ecf4da2c15e9bdf8f72c2095ac637296179b8bba5e91f7eb3e4014b916789a384be110ffd98a86bc837a57c0f2bcef11bd9a7ae42b17453387c3ca8a7b79447948c0ba6a33542aad833df37129573a7f1d0a80be3d0a6303c2872185e89bb285bceae412f28b7b20e2f298fd921d43ab9b783a6dcc8d6b7a6f0f2fd31aea2f913d3a7b4b4af0b888246fc9137528f0175127864a4fbd4d495e83b58973f56df19ec7ab6cbc93df3dfafb110f3c6182c34b6c32c6cf4bd92fa7fee79a844f6337200fb36dda5863478945d658d5f6085b13129c2330414dd23d6a35ff8301dbd2d011a754312cb6f055a1892b0d3f775117db6000fb7ac694ef881cc64fa13e4135d46bb60d03481de98e5176c6ddfe6e1ed7b3e7a9230cafdf62a0cc3394c23f21b3e2178926f2e5ca01d4b39ac6557f39ac68cd58fb2d39262a8a92f7c3a4f7f37c71d7f804e2fa39b682229a9f4c4d30cd8766adbcdd32cd3e0cbc48f7fb74e7c913b812c6cd641fb63dfe88601fd691191d9dbf681572439cb1ac37b1524edf9aa46616608330d710f7377f8526415df8d3e2435226671148c12a3a15c5368edde67dc8d2d1965f54b514605d80c54f6c124c4a5fbb33ff0a4d773aaf0c4ea74dcfda3deed2dd3b1367e52aa5b3126ce741fac22e02ada088f6f25d21d4f1a91b8a41ae8eacf55d3c2084460d4aa2b4f99949d44a26ab214dd95db81fac7de86a3f46267eccd642703be6c5c78d16324220129eea0bfc4a25f21df67d4c55676d3b8a36e69fca3c499d6b5cc6455428f9a4b3ffdd3bf054e1d096860677c8af78a357fbae3faea4e14596cbb05f072dfd650d82c93e8295799efb22e07638420bfa9d506bb5d55feed4b920ba8e130f7283724a09b20ca43470537623986ab7a118f728462599ec9a5da46927c30fe8597ecf7e5b940bf4a29a73b0c4fe6f01186206366dffa9a504baeb817594e2400e9b23872cd5941e81da9daf13e23caf347e04d7c6809e269708e0957e5aa7c7e2bb9c67a86941ed6be681cf5936f04ce7338beb7ab7271d699b6b1a4d3925192f65d9fefcd80b7912c69379b4fee86a5f6655ddb38720a6335c16bf3be2f7e91b310f91ffad73d4290bc03629ffad26e5affa6b02329541217dc813ffd9606703916ccc84b8dc347249216d38991566d04dd6e0b5cd9192de0dded6fd578fa310799ed1c2422f37c0a894370af295dc99b47310cbe72710e6f065d8214f9510f6f2a3c05d1a9438ffbb074ee2faafc6f1890d983dee7c0e78e70a1acba3d1171f6e70f2557f4bc3772d54670d1eb78c5a3076d46056cdc176c43413fd122f3c887e0fc314a0cde8b2c103e27de97bac54c7adea5590f54a5b7f62feceea7355ccd23d6ded38c33ad8444091e7cc39426b48d1fcebd94152e5a26506f69a94e81fc976de11e2c86fdf94d581df84c703ffad2eabcf92385f2e2627f1fa794e557cacb1b599e7872bf4ab97c5cc898a45b9f56ffe63dde9873b0e3666e93b6b9567e071296db0d21d3813dbeae8f1827bf14540fa787a161954f7902fb7da4e0fff1a22200661efde6b3cc5fd827b3ffae3569f1d9e9984a072a76e5cc42124d7fcab525d1cc7324d0304e6e32576b6034c81298a5f2757ded66b17ce933723a96ba589ebd42d435edf0f6d109193524aba776a1e3204232d090df904c7144cb4f267b34012e2ec476071e7158935543a3725cf7a78eaffbbbc6be1be7191f9ee30c612b79c623529baaff6869639a1156ec3fa839286255e977cad6754f6b592c03bc72d90f6cde3ec58522a05659cac4b2600e4debb87cd2aca154b15c2c5d69f23355a8164b1ba39ccd53bd4362883d381847735370d1f33d440152074516c00555d1867a5cb546dbdde909dda8753c8f3ccece095cd3cb9a32d28230e0ab2e1cb433cd383f329dfe871442ea045ae7655f7d6a82707233b82fc01e07a645a2bf2e89ecb126daeac33dd975b72480a87f716558fb10953cbcb17e6bc85deba95b84dad433c5bc928f7d84f68a99df3f741863fb865bf226bbde66b67203663c359492d61623be4d59e4404f65cf1e56865777e2839f3d237c54a08651f464b2cdbe62d950d22ff76c3bac4b82157eb783e5f4fa51871ae11c5c9c1296850c183deb65003de4a9c8cece4bb860b830fc3371027835eb744a7216b4f3c34a2242b5bea1585aba3398e2dad9334916f199d4c0e8aeb76ae0d399ccaa425478cf55611ee71aff972e563736627e259b6bdb5d25248f1a8f7b0f6d2c4d42a31c3a71d3fd2ddcea905acd08f250dadea120a5f0f7613cf0be3214f06d96bbe7df5c15a270a90bd2f52fbced248c98a6abf1e4f9bf04c7cb499a9bce299c6d2c607b0eaf821840562ce4166a6b500d73f01cfffd5b3c5285955b0c1b827902ab6b99d0e19618da0a8442b5f31bb68e6a71b19ba6277e7c6e602ae8b43fa09251b34ed90bac393465a87f6d71ea96f7f1c2393cc55654554ececf86b8e924dfbdccac3900129337de97650be7ed65b557cb20b38edfde855270b53a985f0abd0d2bf76767678220a6fa617b58f37f585916fd94afbd6630084675fa570eb1e242d809fe0b003aaed219f69bd302260dec65cfab9509481f8d457096111daba1e97ec77f97cffe33ebe8ce40949fdca39c6de0ece1e23b09956772f77e6da3ad072c0b12d946af87780c51cee2541ada1e600c843df9e40c8ca4e85d00fe8683ddcd7c074acb358f1470906669a7336a15919d0a3b6e4021ad29e87e594cfd80fe1f1e29b431186491b83349832fd55306f652ff205ef09b4a7cb7fae5b329be34b01470ca20142f93494afe169db557c6d25bbe5a71052444fad52c2ee0466f55dd6b84b1903a981b0b614f044defaf799d0c1041740e1983d0be10ea4ea3e7c8bdf7564821a5f4a910be1f1ee8ae708c1b827dbeef5a05bfd42dedd00989c15ccdc9bb430286b702284de235f34a4407c18f8dd40ffa9c25ed0b02f86f14cc82e88e0d96fa1985f4370e3f546cd61c6a2a7afae09a48341f6023406759839ffdceb0a69b833a95b3c90065c24790ecc3f8b5efe3b1f556e268effb9b8ca66f52edb56da31514d393aafb2f93636cac1f39a8c92c6f5a500e9f800d92b6f9d686401370f7694b3ab1f7f6e160aa17cc321eb50f21156e0922c3dd23b729dbbd22531c056fd96ac3907a39952f624bd06a36a51e2fcee7df792dd50927a30ad1b841d10b4062c15b4139113f878efdca5f62dd68dffdf2b03d76077cc17d409b1b036deda65a4e08add686a13c90dd1e597a599d8dc69e1454d3f9725ebf8af033dae49e29f813bfae3f419fc867017b8385fa8f11a767d575c1bef6cb6ad30800a3fa9fa06737d9238af8e2f05e247c87b39c1ced757f6bf6b961a69e6f29d3486181e26262baef3e80db8c33d6b1eca6eb636053f1b332ec39c357647439d3b4ddf6c0f02e60c770d904b2fdc19a82d522994a76eb34922904311c4d3f15562ae6b930992a934638cce0149d6f5a9644673cf5533262d0a224ef655f14572ee84d219e55c0ace6157492bf87c203fa1d2ee749ff53d5e76878d74a93a", &(0x7f00000001c0)=""/154}, 0x18)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)
r2 = msgget(0x2, 0x204)
msgsnd(r2, &(0x7f0000000100)={0x1, "4e4f114094695fd591f156e8bf813fe45b692a7ed19c86d0fe13a2bd5e244f46cf3c137c39048df56aa7c19a9a5fa2c75b13ea3485f650d0897bcd1076b7755d55b98ccb352cf7f78966da3c89fc695acec748f603f3a8121fbfb113c1ea222142431160bc66d65d0f71ce8b6ed089609427ce9de6b1dc3c4b1991fd42df711aec2699f7a14c37f71f9bfa49d0d98ef3e1b37650a0ccf217395ef35ab10d60e8a25de608a3d72f199cddbba5bc287b531a735f1b6e"}, 0xbd, 0x800)

[ 1576.310594] Sensor A: Horizontal Flip: false
[ 1576.322967] Sensor A: Brightness: 128
[ 1576.334705] Sensor A: Contrast: 128
[ 1576.350838] Sensor A: Hue: 0
09:25:41 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000006000020"], 0x0, 0x0, 0x0})

[ 1576.361656] Sensor A: Saturation: 128
[ 1576.372794] Sensor A: ==================  END STATUS  ==================
[ 1576.382809] binder: undelivered TRANSACTION_ERROR: 29201
[ 1576.412933] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:25:41 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1509980000000000]})

09:25:41 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0xff00000000000000, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1576.467892] binder: 28680:28681 got transaction with invalid data ptr
[ 1576.503291] binder: 28680:28681 transaction failed 29201/-14, size 8192-0 line 3053
[ 1576.579089] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1576.602874] Sensor A: =================  START STATUS  =================
[ 1576.622903] binder: undelivered TRANSACTION_ERROR: 29201
[ 1576.628275] Sensor A: Test Pattern: 75% Colorbar
[ 1576.651079] Sensor A: Vertical Flip: false
[ 1576.667401] Sensor A: Horizontal Flip: false
[ 1576.682100] Sensor A: Brightness: 128
[ 1576.690795] Sensor A: Contrast: 128
[ 1576.709161] Sensor A: Hue: 0
[ 1576.722826] Sensor A: Saturation: 128
[ 1576.727160] Sensor A: ==================  END STATUS  ==================
[ 1576.751506] Sensor A: =================  START STATUS  =================
[ 1576.758775] Sensor A: Test Pattern: 75% Colorbar
[ 1576.763908] Sensor A: Vertical Flip: false
[ 1576.768315] Sensor A: Horizontal Flip: false
[ 1576.773151] Sensor A: Brightness: 128
[ 1576.777168] Sensor A: Contrast: 128
[ 1576.781004] Sensor A: Hue: 0
[ 1576.784435] Sensor A: Saturation: 128
[ 1576.788437] Sensor A: ==================  END STATUS  ==================
09:25:41 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0xa080, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

09:25:42 executing program 4:
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(0x0, 0x1004000000016)

09:25:42 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00 '], 0x0, 0x0, 0x0})

09:25:42 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00')

09:25:42 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:25:42 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ffffffffffffff]})

09:25:42 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f00000000c0)={0xa, @pix={0x9, 0x9, 0x51424752, 0x0, 0x0, 0x3, 0x7, 0x86ae, 0x1, 0x6, 0x1, 0x4}})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

09:25:42 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0xffffffffffffecbd, 0x8040)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2040, 0x9)
r2 = dup2(r0, r1)
write$USERIO_CMD_REGISTER(r2, &(0x7f0000000140), 0x2)
r3 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff000000002000010000000104000000000000037aad0000000000000000000000001200000300000000000000000000000000"], 0x58)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)
r4 = gettid()
ptrace$setsig(0x4203, r4, 0x7, &(0x7f0000000040)={0x1, 0x26c, 0x20})

[ 1577.153861] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1577.161314] Sensor A: =================  START STATUS  =================
[ 1577.184790] binder: 28706:28718 got transaction with invalid data ptr
[ 1577.191480] binder: 28706:28718 transaction failed 29201/-14, size 8192-0 line 3053
09:25:42 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x2, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:25:42 executing program 3:
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r2 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x10000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
r4 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x101400)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000100)={0x1, [0x3]}, 0x6)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r5 = dup2(r2, r1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0xfffffffffffffffd, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x10})
write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)
ioctl$UI_SET_PROPBIT(r4, 0x4004556e, 0x12)
dup(r3)
dup(r0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f0000000200)={'raw\x00', 0x2, [{}, {}]}, 0x48)

[ 1577.253389] Sensor A: Test Pattern: 75% Colorbar
[ 1577.275327] Sensor A: Vertical Flip: false
09:25:42 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00 '], 0x0, 0x0, 0x0})

[ 1577.302129] Sensor A: Horizontal Flip: false
[ 1577.310841] binder: undelivered TRANSACTION_ERROR: 29201
[ 1577.342728] Sensor A: Brightness: 128
[ 1577.354815] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1577.362960] Sensor A: Contrast: 128
[ 1577.382835] Sensor A: Hue: 0
[ 1577.390311] binder: 28742:28743 got transaction with invalid data ptr
[ 1577.403254] Sensor A: Saturation: 128
[ 1577.411946] Sensor A: ==================  END STATUS  ==================
[ 1577.425572] binder: 28742:28743 transaction failed 29201/-14, size 8192-0 line 3053
09:25:42 executing program 0:
r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x6, 0x40000)
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000080)=0xffffffffffffff6e)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff000000002000010000000104000000000000000000000000120000030000000000000000000000000000008e58fd40c3208c3ee11ad6edc5b368f15d107601db5b40c67e23adde204a2e693d10288440c85b0ad3381f8412e200da"], 0x58)
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

09:25:42 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x3, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1577.442290] Sensor A: =================  START STATUS  =================
[ 1577.501214] Sensor A: Test Pattern: 75% Colorbar
[ 1577.523782] Sensor A: Vertical Flip: false
[ 1577.547959] Sensor A: Horizontal Flip: false
[ 1577.553190] binder: undelivered TRANSACTION_ERROR: 29201
[ 1577.562900] Sensor A: Brightness: 128
[ 1577.566876] Sensor A: Contrast: 128
[ 1577.587964] Sensor A: Hue: 0
[ 1577.601698] Sensor A: Saturation: 128
[ 1577.618120] Sensor A: ==================  END STATUS  ==================
09:25:42 executing program 4:
r0 = gettid()
timer_create(0x0, 0x0, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:25:42 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000012000020"], 0x0, 0x0, 0x0})

09:25:42 executing program 0:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

09:25:42 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]})

09:25:42 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x22000, 0x0)
ioctl$RTC_VL_CLR(r1, 0x7014)
r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x6, 0x800)
write$P9_RLERRORu(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="3c000000110165310000006e000000000031108a3e783b000000007baa00000000000006000000001510bf7ddd000000000000006700ff0700000000000000005cc2de69a72604e16bf0b89fdc7bf7dd3867973ea0673350c24ab98cf4c7622d5c233bd478b2fb8319d0222911dc65060000000000000093ef648cdf370c25e80138f645ec9809beb4157a4acd6301ecd8350000000000000000"], 0x3c)
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x500, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r5 = dup2(r2, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x15\x10\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00g\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

[ 1578.059867] binder: 28765:28767 got transaction with invalid data ptr
[ 1578.071685] Sensor A: =================  START STATUS  =================
[ 1578.078821] binder: 28765:28767 transaction failed 29201/-14, size 8192-0 line 3053
[ 1578.089818] Sensor A: Test Pattern: 75% Colorbar
[ 1578.102317] Sensor A: Vertical Flip: false
09:25:43 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x80000, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x88000, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r3, 0xc0104320, &(0x7f0000000100)={0x5, &(0x7f00000001c0)="7e67d7643e1ef64fdc1a0ef66649812a9a51a90122bfbf0ec9f7e36e2c5bb01726b0a0563721835740ca6cc3d7b55151df30192a1be85ba96e126b97eb37a84df44f78e6edb66c0cbe76d69c77de70db9495b9e89eeefef9ffdfb0c00510a22e3623c944899c7920df6a7fb3d7dbc52df7984c5d44730229f667168d342fc8b070a4895b394c067d9d697d0f12"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x40000000400200)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r1, 0x3, 0x1, 0xb8c, &(0x7f0000000340)=[0x0], 0x1}, 0x20)
r5 = dup2(r4, r0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000440)={[{0x5115, 0x6, 0x10000, 0x400, 0x20, 0x1ff, 0x13b, 0x7, 0x0, 0x749c38d0, 0x7, 0x401, 0x80000001}, {0x0, 0x100000000, 0x0, 0x5, 0x5, 0x800, 0xffffffff, 0x3, 0xff, 0x1, 0xa45c, 0x8, 0x7}, {0x8dcd, 0x777, 0xf000000000000000, 0xfffffffffffffff9, 0xffffffff, 0x200, 0xfffffffffffffffc, 0x5, 0x9, 0x1, 0x0, 0x5, 0x8}], 0x46a9})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

[ 1578.134551] Sensor A: Horizontal Flip: false
[ 1578.168388] Sensor A: Brightness: 128
[ 1578.186297] Sensor A: Contrast: 128
[ 1578.208190] Sensor A: Hue: 0
09:25:43 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00 '], 0x0, 0x0, 0x0})

09:25:43 executing program 4:
r0 = gettid()
timer_create(0x0, 0x0, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:25:43 executing program 0:
clone(0x20000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x8)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='highspeed\x00', 0xa)
fcntl$setpipe(r1, 0x407, 0x5)
getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000100)={'filter\x00'}, &(0x7f0000000240)=0x78)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f00000000c0)=""/51)
ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000180))
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

[ 1578.226686] Sensor A: Saturation: 128
[ 1578.233244] binder: undelivered TRANSACTION_ERROR: 29201
[ 1578.253640] Sensor A: ==================  END STATUS  ==================
[ 1578.293763] Sensor A: =================  START STATUS  =================
[ 1578.339099] Sensor A: Test Pattern: 75% Colorbar
[ 1578.348367] binder: 28788:28789 got transaction with invalid data ptr
[ 1578.365625] Sensor A: Vertical Flip: false
[ 1578.370504] binder: 28788:28789 transaction failed 29201/-14, size 8192-0 line 3053
[ 1578.378517] Sensor A: Horizontal Flip: false
09:25:43 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x4, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1578.393248] Sensor A: Brightness: 128
[ 1578.420116] Sensor A: Contrast: 128
09:25:43 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00\x00 '], 0x0, 0x0, 0x0})

09:25:43 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[], 0x25e)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)
r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x9, 0x400000)
ioctl$TIOCEXCL(r1, 0x540c)
r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x3, 0x20000)
ioctl$KVM_NMI(r2, 0xae9a)

09:25:43 executing program 4:
r0 = gettid()
timer_create(0x0, 0x0, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1578.444786] Sensor A: Hue: 0
[ 1578.447961] Sensor A: Saturation: 128
[ 1578.465866] Sensor A: ==================  END STATUS  ==================
[ 1578.480603] binder: undelivered TRANSACTION_ERROR: 29201
09:25:43 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffffffffffff]})

09:25:43 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r1, 0x2, 0x1, 0xc8bc, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000400000000000000030003006f360000000000003800000000000000e8ff0000000020010100000001040000000000000300000000000000000000000012000003000000000000000000000000000008"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

[ 1578.619508] binder: 28801:28805 got transaction with invalid data ptr
[ 1578.651715] Sensor A: =================  START STATUS  =================
[ 1578.680145] binder: 28801:28805 transaction failed 29201/-14, size 8192-0 line 3053
[ 1578.688499] Sensor A: Test Pattern: 75% Colorbar
[ 1578.698397] Sensor A: Vertical Flip: false
[ 1578.709566] Sensor A: Horizontal Flip: false
[ 1578.716919] Sensor A: Brightness: 128
[ 1578.725917] Sensor A: Contrast: 128
09:25:43 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:25:43 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff00000000200001000000010400008dbd00000000030000000000000000000000001200000300000000000000000000000000"], 0x58)
sync_file_range(r0, 0x85, 0x2, 0x3)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000000c0)={0x0, 0xc000})
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
clock_settime(0x0, &(0x7f0000000040))
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000100)={<r2=>0x0, 0x0, 0x9, 0x3f, 0x81, 0x1}, &(0x7f0000000140)=0x14)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000300)={r2, @in6={{0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, [], 0xd}, 0x6}}}, 0x84)
sendmsg$nl_route_sched(r1, &(0x7f0000000400)={&(0x7f0000000180), 0xc, &(0x7f00000003c0)={&(0x7f0000000240)=@deltaction={0x4c, 0x31, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x5, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x4, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0x10, 0x8, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x800)

[ 1578.729841] Sensor A: Hue: 0
[ 1578.740062] Sensor A: Saturation: 128
[ 1578.746710] Sensor A: ==================  END STATUS  ==================
[ 1578.803951] device bridge_slave_1 left promiscuous mode
[ 1578.809551] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1578.823803] Sensor A: =================  START STATUS  =================
[ 1578.848654] binder: undelivered TRANSACTION_ERROR: 29201
[ 1578.857963] Sensor A: Test Pattern: 75% Colorbar
[ 1578.886742] device bridge_slave_0 left promiscuous mode
[ 1578.893399] Sensor A: Vertical Flip: false
[ 1578.899362] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1578.905887] Sensor A: Horizontal Flip: false
[ 1578.917806] IPVS: ftp: loaded support on port[0] = 21
[ 1578.927739] Sensor A: Brightness: 128
[ 1578.931645] Sensor A: Contrast: 128
[ 1578.935797] Sensor A: Hue: 0
[ 1578.938926] Sensor A: Saturation: 128
[ 1578.943923] Sensor A: ==================  END STATUS  ==================
09:25:44 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x80, 0x0)
inotify_add_watch(r3, &(0x7f0000000340)='./file0\x00', 0x4000860)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000200)=<r4=>0x0)
write$P9_RGETLOCK(r3, &(0x7f0000000240)={0x1e, 0x37, 0x2, {0x3, 0x73, 0x3, r4}}, 0x1e)
r5 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)
ioctl$CAPI_GET_MANUFACTURER(r5, 0xc0044306, &(0x7f0000000140)=0x1)

09:25:44 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00 '], 0x0, 0x0, 0x0})

09:25:44 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000026c20bc3289a0137000000000000000000000000000094607ef2c4a032ea7a036fccfe735ee03bc797b266d5f20c7051e0b107159fbff681eddcb217c8960c9810d497d6a3bdfa3226e0a77b25a59589c407483c1b22f408"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

09:25:44 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[], 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={<r1=>0x0}, &(0x7f0000000180)=0xc)
sched_setaffinity(r1, 0x6, &(0x7f0000000300)=0xc000)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x100, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x400580, 0x0)
ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000140))
chdir(&(0x7f0000000080)='./file0\x00')

[ 1579.081428] device hsr_slave_1 left promiscuous mode
[ 1579.167606] binder: 28850:28858 got transaction with invalid data ptr
[ 1579.178070] device hsr_slave_0 left promiscuous mode
[ 1579.190505] binder: 28850:28858 transaction failed 29201/-14, size 8192-0 line 3053
[ 1579.240729] team0 (unregistering): Port device team_slave_1 removed
[ 1579.264892] team0 (unregistering): Port device team_slave_0 removed
[ 1579.290112] bond0 (unregistering): Releasing backup interface bond_slave_1
[ 1579.337907] bond0 (unregistering): Releasing backup interface bond_slave_0
[ 1579.434419] bond0 (unregistering): Released all slaves
[ 1579.620278] binder: undelivered TRANSACTION_ERROR: 29201
[ 1579.729002] chnl_net:caif_netlink_parms(): no params data found
[ 1579.779274] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1579.788753] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1579.797199] device bridge_slave_0 entered promiscuous mode
[ 1579.807086] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1579.817246] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1579.825457] device bridge_slave_1 entered promiscuous mode
[ 1579.844954] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 1579.905323] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 1579.924543] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 1579.931784] team0: Port device team_slave_0 added
[ 1579.937611] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 1579.945162] team0: Port device team_slave_1 added
[ 1579.950408] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 1579.958312] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 1580.016171] device hsr_slave_0 entered promiscuous mode
[ 1580.053051] device hsr_slave_1 entered promiscuous mode
[ 1580.093402] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 1580.100559] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 1580.136890] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1580.143394] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1580.150087] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1580.156521] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1580.213540] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1580.231576] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 1580.243711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1580.259125] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1580.267083] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1580.289806] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 1580.296295] 8021q: adding VLAN 0 to HW filter on device team0
[ 1580.307056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1580.315166] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1580.321541] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1580.343521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1580.351252] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1580.357666] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1580.368335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1580.388403] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1580.398508] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1580.409639] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1580.417792] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1580.426171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1580.434614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1580.442401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1580.459035] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[ 1580.467305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1580.480382] 8021q: adding VLAN 0 to HW filter on device batadv0
09:25:45 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x5, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:25:45 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c06000000000000000000000000030003006f360000000000003800000000000000e8ff000000002000010000000104000000000000030000000000000000000000001268884176710ba513fced0000030000000000"], 0x58)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)
execveat(r0, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x41000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

09:25:45 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000440)={0x3, 0x0, @pic={0x3, 0x0, 0x1, 0xe0, 0x0, 0x1, 0x0, 0x9, 0x7fffffff, 0x4, 0x9bf, 0x5, 0x2b34, 0x3f, 0x7d4e01, 0x8}})

09:25:45 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdfd]})

09:25:45 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00\x00 '], 0x0, 0x0, 0x0})

[ 1580.595602] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1580.669528] Sensor A: =================  START STATUS  =================
[ 1580.673606] binder: 28884:28886 got transaction with invalid data ptr
[ 1580.689624] Sensor A: Test Pattern: 75% Colorbar
[ 1580.701489] Sensor A: Vertical Flip: false
[ 1580.710530] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:25:45 executing program 0:
clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

[ 1580.728500] Sensor A: Horizontal Flip: false
[ 1580.738870] Sensor A: Brightness: 128
[ 1580.745953] binder: 28884:28886 transaction failed 29201/-14, size 8192-0 line 3053
[ 1580.749499] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1580.778671] Sensor A: Contrast: 128
[ 1580.788155] Sensor A: Hue: 0
[ 1580.795888] Sensor A: Saturation: 128
[ 1580.800007] Sensor A: ==================  END STATUS  ==================
[ 1580.857216] Sensor A: =================  START STATUS  =================
[ 1580.864449] binder: undelivered TRANSACTION_ERROR: 29201
[ 1580.894706] Sensor A: Test Pattern: 75% Colorbar
[ 1580.912107] Sensor A: Vertical Flip: false
[ 1580.928416] Sensor A: Horizontal Flip: false
[ 1580.936930] Sensor A: Brightness: 128
[ 1580.940891] Sensor A: Contrast: 128
[ 1580.958617] Sensor A: Hue: 0
[ 1580.961794] Sensor A: Saturation: 128
[ 1580.968127] Sensor A: ==================  END STATUS  ==================
09:25:46 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x6, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:25:46 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:25:46 executing program 3:
r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x3ff)
r1 = memfd_create(&(0x7f0000000400)='^\x00', 0x4)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x51, 0x2, 0x1000, 'queue0\x00', 0x400})
r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = dup2(r2, r1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

09:25:46 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x00\x00 '], 0x0, 0x0, 0x0})

09:25:46 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f3600000000f3ff3700000042000000e8ff0000000020000100000001040200000000001b000000000000000000000000120000030000000085660000cc186638000000"], 0x58)
r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x1, 0x200)
ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000040))
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

09:25:46 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe7]})

[ 1581.888938] Sensor A: =================  START STATUS  =================
[ 1581.897421] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1581.900402] binder: 28920:28921 got transaction with invalid data ptr
[ 1581.914096] Sensor A: Test Pattern: 75% Colorbar
[ 1581.920867] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:25:46 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x7, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1581.935641] Sensor A: Vertical Flip: false
[ 1581.940069] Sensor A: Horizontal Flip: false
[ 1581.970176] Sensor A: Brightness: 128
[ 1581.973531] binder: 28920:28921 transaction failed 29201/-14, size 8192-0 line 3053
[ 1581.982023] Sensor A: Contrast: 128
09:25:46 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x0, 0x2)

[ 1581.990079] Sensor A: Hue: 0
[ 1582.002695] Sensor A: Saturation: 128
[ 1582.011266] Sensor A: ==================  END STATUS  ==================
[ 1582.023787] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:25:47 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000000c0)={<r4=>r2})
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000100)=0x5, 0x4)
r5 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

09:25:47 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x60, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:25:47 executing program 0:
r0 = mq_open(&(0x7f00000000c0)='\x00', 0x1, 0x80, &(0x7f0000000100)={0x7ff, 0x3, 0x1cf7, 0x8e6e, 0x8, 0x530, 0x40, 0x5})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0x100, 0x100, 0x0, 0x100, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, &(0x7f0000000140), {[{{@ip={@rand_addr=0xad, @loopback, 0xff, 0xffffffff, 'syzkaller0\x00', 'team0\x00', {}, {0xff}, 0x0, 0x2}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xa5, 'syz1\x00', 0x80000001}}}, {{@uncond, 0x0, 0x98, 0x100}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x40, 0x8, 0x1, 'pptp\x00', 'syz0\x00', 0xfff}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x8000, 0x0)
write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

[ 1582.067631] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:25:47 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]})

09:25:47 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00\x00 '], 0x0, 0x0, 0x0})

[ 1582.144626] binder: undelivered TRANSACTION_ERROR: 29201
[ 1582.188628] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1582.219645] Sensor A: =================  START STATUS  =================
[ 1582.254834] binder: 28960:28962 got transaction with invalid data ptr
[ 1582.256653] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1582.267765] Sensor A: Test Pattern: 75% Colorbar
[ 1582.281968] binder: 28960:28962 transaction failed 29201/-14, size 8192-0 line 3053
[ 1582.290441] Sensor A: Vertical Flip: false
09:25:47 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
r4 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x8, 0x2000)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00')
ioctl$SG_GET_ACCESS_COUNT(r3, 0x2289, &(0x7f0000000340))
sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x804, 0x70bd27, 0x25dfdbfd, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0xff}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

[ 1582.313030] Sensor A: Horizontal Flip: false
[ 1582.317818] Sensor A: Brightness: 128
[ 1582.321897] Sensor A: Contrast: 128
[ 1582.342782] Sensor A: Hue: 0
[ 1582.373016] Sensor A: Saturation: 128
[ 1582.377065] Sensor A: ==================  END STATUS  ==================
[ 1582.427786] binder: undelivered TRANSACTION_ERROR: 29201
09:25:49 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x5, 0x80)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x1, 0x1)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x80000, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0xcc001, 0x0)
pipe2(&(0x7f0000000280), 0x0)
r0 = syz_open_dev$amidi(&(0x7f0000000300)='/dev/amidi#\x00', 0xffffffff, 0x30400)
execveat(r0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0xc00)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

09:25:49 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:25:49 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x300, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:25:49 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z\x00\x00 '], 0x0, 0x0, 0x0})

09:25:49 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x80, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3f}], 0x1c)
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

09:25:49 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7]})

09:25:50 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r4 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)
fsync(r3)

[ 1585.054832] binder: 28989:28991 got transaction with invalid data ptr
[ 1585.061570] binder: 28989:28991 transaction failed 29201/-14, size 8192-0 line 3053
[ 1585.080313] Sensor A: =================  START STATUS  =================
[ 1585.087995] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1585.105808] Sensor A: Test Pattern: 75% Colorbar
[ 1585.110597] Sensor A: Vertical Flip: false
[ 1585.110618] Sensor A: Horizontal Flip: false
[ 1585.110634] Sensor A: Brightness: 128
[ 1585.110651] Sensor A: Contrast: 128
[ 1585.110665] Sensor A: Hue: 0
[ 1585.110679] Sensor A: Saturation: 128
[ 1585.110699] Sensor A: ==================  END STATUS  ==================
09:25:50 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000300))
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r1 = accept(0xffffffffffffffff, &(0x7f0000000040)=@nfc_llcp, &(0x7f00000000c0)=0x80)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x181001, 0x20)
openat(r2, &(0x7f0000000180)='./file0\x00', 0x40400, 0x144)
ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000100))
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

[ 1585.152368] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:25:50 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000000030020"], 0x0, 0x0, 0x0})

[ 1585.181223] Sensor A: =================  START STATUS  =================
[ 1585.209259] binder: undelivered TRANSACTION_ERROR: 29201
[ 1585.223211] Sensor A: Test Pattern: 75% Colorbar
09:25:50 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x500, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1585.260680] Sensor A: Vertical Flip: false
09:25:50 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
socketpair$unix(0x1, 0x2000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x8000000000201, 0x0)
ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040))
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xffffff78)
ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc))
r3 = syz_open_pts(r2, 0x0)
ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2})
read(r3, &(0x7f0000000080)=""/19, 0xffffff5c)
ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup(r5)
accept4$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x1c, 0x80800)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r8 = dup2(r4, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

09:25:50 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)=[&(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='eth1em1bdevem1)\x00', &(0x7f00000003c0)='/proc/self/net/pfkey\x00', &(0x7f0000000400)='/proc/self/net/pfkey\x00'], &(0x7f00000006c0)=[&(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='mime_typeem0/\x00', &(0x7f0000000540)='\x00', &(0x7f0000000580)='#selinux\xe0:security\x10\x00', &(0x7f00000005c0)='\x00', &(0x7f0000000600)='/proc/self/net/pfkey\x00', &(0x7f0000000640)='/\x00', &(0x7f0000000680)='/proc/self/net/pfkey\x00'])
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000080)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0]}, &(0x7f00000000c0)=0x1c)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000100)={r2, 0x97, "73cfdb0a9ec93c79f400f3fca259d7c4fcc4a2765fc26f4b477c30f70f0b208239e85ecc7deba577f178e4987cb0f2c691e22f55d2b6d4bb9f66f0a869e2a579d911ac51b84286b1ee21587a580d0e7411211eca43d5dfaf7cd81733ee229540277e86575302a07b5df78db686228e8012d31aca647d8a00a53d12190a5592298b0303616a9a91c818735bef32df6e8ab2fc603ed621d3"}, &(0x7f0000000240)=0x9f)

[ 1585.287089] Sensor A: Horizontal Flip: false
[ 1585.326092] binder: 29023:29024 got transaction with invalid data ptr
[ 1585.342160] Sensor A: Brightness: 128
[ 1585.355859] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:25:50 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x600, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1585.370262] binder: 29023:29024 transaction failed 29201/-14, size 8192-0 line 3053
[ 1585.379637] Sensor A: Contrast: 128
[ 1585.384093] Sensor A: Hue: 0
[ 1585.393157] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1585.405184] Sensor A: Saturation: 128
[ 1585.418099] Sensor A: ==================  END STATUS  ==================
[ 1585.435527] binder: undelivered TRANSACTION_ERROR: 29201
[ 1585.515627] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1585.560108] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:25:53 executing program 0:
r0 = open(&(0x7f0000000040)='./file0\x00', 0x200000, 0x112)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000080)={<r1=>0x0, 0x10000000, 0x20, 0x1, 0x4}, &(0x7f00000000c0)=0x18)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r1, 0xc8}, &(0x7f0000000200)=0x8)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r2, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRESOCT=r2, @ANYRESHEX=0x0, @ANYRESHEX=r2, @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRESOCT=r2, @ANYBLOB="fa5bb9a0374be422e2f6d1a2a78bf08945b1e261cd8b61354389ea3160edc2aafac7ad71772a0fc8c8c8990b1957a6b17a435580cf", @ANYRESHEX=r2, @ANYRESHEX=r2, @ANYRESDEC=r2, @ANYRES32=r2, @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRES32=r2]]], 0x5)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

09:25:53 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:25:53 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ff]})

09:25:53 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x700, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:25:53 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000100)={0x6, 0x80, 0x7, 0x9, 0x7, 0x41, 0x3, 0x6, 0x4, 0x80, 0x7}, 0xb)
r4 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

09:25:53 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000000050020"], 0x0, 0x0, 0x0})

[ 1588.138496] binder: 29053:29060 got transaction with invalid data ptr
[ 1588.154786] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1588.165221] Sensor A: =================  START STATUS  =================
[ 1588.177181] binder: 29053:29060 transaction failed 29201/-14, size 8192-0 line 3053
[ 1588.181315] Sensor A: Test Pattern: 75% Colorbar
[ 1588.193970] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1588.203993] Sensor A: Vertical Flip: false
09:25:53 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000001c0)='veth1\x00', 0xb4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r4, 0x6, 0x4000000000013, &(0x7f0000000180), 0x3b2)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4)
ioctl$int_in(r4, 0x5421, &(0x7f0000000000)=0xe30)
sendmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000680)='2', 0x1}], 0x1}}], 0x1, 0x4000001)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r1, 0x0, r3, 0x0, 0x10005, 0x0)
syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = dup2(r2, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

09:25:53 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x2000, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1588.228938] Sensor A: Horizontal Flip: false
[ 1588.238255] Sensor A: Brightness: 128
[ 1588.252135] Sensor A: Contrast: 128
09:25:53 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000000060020"], 0x0, 0x0, 0x0})

[ 1588.289308] Sensor A: Hue: 0
[ 1588.295807] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1588.316295] binder: undelivered TRANSACTION_ERROR: 29201
[ 1588.321492] Sensor A: Saturation: 128
09:25:53 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x18002, 0x0)
bind$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000ae0000000000000000030003006f360000000000003800000000000000e8ff000000002000010000000104000000000000030000000000000000000000156985a0b2d232bc470000000000000000000000"], 0x58)
syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xfff, 0x0)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

09:25:53 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x3f00, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1588.340949] Sensor A: ==================  END STATUS  ==================
[ 1588.365265] binder: 29087:29088 got transaction with invalid data ptr
[ 1588.402760] binder: 29087:29088 transaction failed 29201/-14, size 8192-0 line 3053
[ 1588.422648] Sensor A: =================  START STATUS  =================
[ 1588.429522] Sensor A: Test Pattern: 75% Colorbar
09:25:53 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='queue1\x00', 0x200000000007)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r1)
r4 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000200)={0x1, r4})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000480)='hybla\x00', 0x6)
getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000340)={'filter\x00', 0x0, 0x4, 0x6c, [], 0x2, &(0x7f0000000280)=[{}, {}], &(0x7f00000002c0)=""/108}, &(0x7f00000003c0)=0x78)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clock_nanosleep(0x0, 0x1, &(0x7f0000000440)={0x77359400}, 0x0)
r5 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000000c0)={0x5, 0x4, 0x2, 'queue1\x00'})
clock_gettime(0x0, &(0x7f00000001c0)={<r6=>0x0, <r7=>0x0})
write$sndseq(r5, &(0x7f0000000240)=[{0x4, 0x0, 0x71, 0x1ff, @time={r6, r7+10000000}, {0xfffffffffffffffe}, {}, @connect}], 0x30)

[ 1588.459188] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1588.496618] binder: undelivered TRANSACTION_ERROR: 29201
09:25:53 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00 '], 0x0, 0x0, 0x0})

[ 1588.511772] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1588.517709] Sensor A: Vertical Flip: false
[ 1588.537974] binder: 29104:29105 got transaction with invalid data ptr
[ 1588.554475] Sensor A: Horizontal Flip: false
[ 1588.561345] binder: 29104:29105 transaction failed 29201/-14, size 8192-0 line 3053
[ 1588.592846] Sensor A: Brightness: 128
[ 1588.607789] Sensor A: Contrast: 128
[ 1588.624851] Sensor A: Hue: 0
[ 1588.636756] Sensor A: Saturation: 128
[ 1588.640887] Sensor A: ==================  END STATUS  ==================
[ 1588.648065] binder: undelivered TRANSACTION_ERROR: 29201
09:25:56 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:25:56 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x4000, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:25:56 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x10)
syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x3, 0x40001)

09:25:56 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00 '], 0x0, 0x0, 0x0})

09:25:56 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd]})

09:25:56 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
fcntl$getown(r3, 0x9)
r4 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

[ 1591.273601] binder: 29113:29121 got transaction with invalid data ptr
[ 1591.278821] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1591.297343] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1591.306195] Sensor A: =================  START STATUS  =================
09:25:56 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

[ 1591.325123] binder: 29113:29121 transaction failed 29201/-14, size 8192-0 line 3053
[ 1591.330796] Sensor A: Test Pattern: 75% Colorbar
[ 1591.342711] Sensor A: Vertical Flip: false
[ 1591.360371] Sensor A: Horizontal Flip: false
09:25:56 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f3600000000000089f7000000000000e8ff0000000020000100000001040000000000ef00363e00000000000003000000000000000000000000000000"], 0x58)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={<r1=>0xffffffffffffff9c})
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000040}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x1c0, r2, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffffffffffd}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc510}]}, @TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3c}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x686}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_NET={0x50, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10000}]}, @TIPC_NLA_MEDIA={0xb4, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x27f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc922}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xde}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3d1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x15}]}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8225}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7e47}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffffffffffc}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x428}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ad1}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)
r3 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x7, 0x402002)
openat$cgroup_type(r3, &(0x7f0000000240)='cgroup.type\x00', 0x2, 0x0)

[ 1591.391325] Sensor A: Brightness: 128
09:25:56 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000000120020"], 0x0, 0x0, 0x0})

09:25:56 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x6000, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1591.437266] binder: undelivered TRANSACTION_ERROR: 29201
[ 1591.443290] Sensor A: Contrast: 128
[ 1591.485729] Sensor A: Hue: 0
[ 1591.490212] Sensor A: Saturation: 128
[ 1591.490650] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1591.508014] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1591.517946] Sensor A: ==================  END STATUS  ==================
09:25:56 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
socketpair(0x11, 0x3, 0x20, &(0x7f00000000c0))
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
lsetxattr$trusted_overlay_origin(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10010, r1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)
r3 = syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x6, 0x290000)
r4 = gettid()
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000340)={[], 0x1, 0x8, 0x792c, 0x100000000, 0x3ff, r4})

[ 1591.531499] binder: 29152:29153 got transaction with invalid data ptr
[ 1591.551083] Sensor A: =================  START STATUS  =================
[ 1591.575299] binder: 29152:29153 transaction failed 29201/-14, size 8192-0 line 3053
09:25:56 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0xff00, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1591.589863] Sensor A: Test Pattern: 75% Colorbar
[ 1591.597604] Sensor A: Vertical Flip: false
[ 1591.602225] Sensor A: Horizontal Flip: false
[ 1591.617641] Sensor A: Brightness: 128
[ 1591.628789] Sensor A: Contrast: 128
[ 1591.666887] Sensor A: Hue: 0
[ 1591.675198] Sensor A: Saturation: 128
[ 1591.684421] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1591.687140] Sensor A: ==================  END STATUS  ==================
[ 1591.726072] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1591.748863] binder: undelivered TRANSACTION_ERROR: 29201
09:25:59 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:25:59 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x10440)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0xa, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {<r1=>0x0}, {}, {}]})
ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000001c0)={r1, 0x1})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = dup2(r0, r0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000380)={0x0, 0x7, 0xdd88, 0x7f}, &(0x7f00000003c0)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000400)={<r3=>0x0, 0xb5, "667c9abc85e60875bf7823eb4a08bd446ca2e8400a9683791247bcca5258dfe3cfeb51ee9afe37bda21ec91fbce3c06cac8d0b592cfc80d138988115f6aecbda976a6ecca6036dbf1310a582dd94396990717447d19a3940621e6bea16eb76cd72780822af7fa8dd2a32936e37ff9cde41ad2b317169726bfbe1db886a3e2b36bb6f83afdc29d728ccdb06dbf04c6db58e3b311293be082230b861303c5a3e8e6ae02b59223f9a9c3a093bc3f276569e7a9da89b76"}, &(0x7f0000000500)=0xbd)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000200)={<r4=>r3, 0x68, &(0x7f0000000040)=[@in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e21, 0xcb, @remote, 0xc0}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e24, 0x8, @mcast1, 0xf05}]}, &(0x7f0000000240)=0x10)
ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000300)=<r5=>0x0)
sched_rr_get_interval(r5, &(0x7f0000000340))
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000280)={r4, 0x8811, 0xffffffffffffff01}, 0x8)
r6 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000004c0))
write$binfmt_elf32(r6, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x58)
execveat(r6, &(0x7f00000000c0)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

09:25:59 executing program 3:
r0 = dup(0xffffffffffffffff)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=<r1=>0x0)
sendmsg$nl_generic(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x68, 0x42, 0x104, 0x70bd27, 0x25dfdbfe, {0x1c}, [@generic="92e93e9776f817d1ac7779f311dd51b595499dc7d61db0e65d7eb7b07c718f81b7ceb42515339d54df306af3560be8435ea417e1de46d7791fba89587a4dc9b21d5151facf0be7f94cbd89", @typed={0x8, 0x29, @pid=r1}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
r2 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r3 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000140))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfe69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = dup2(r3, r2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)
write$FUSE_WRITE(r0, &(0x7f00000001c0)={0x18, 0xffffffffffffffd7, 0x0, {0x4000000000000002}}, 0x18)

09:25:59 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe7]})

09:25:59 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00 '], 0x0, 0x0, 0x0})

09:25:59 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x1000000, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1594.385135] binder: 29176:29178 got transaction with invalid data ptr
[ 1594.398324] Sensor A: =================  START STATUS  =================
[ 1594.413157] Sensor A: Test Pattern: 75% Colorbar
[ 1594.415878] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1594.421157] binder: 29176:29178 transaction failed 29201/-14, size 8192-0 line 3053
09:25:59 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x800000000200000, 0x0)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

09:25:59 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r5 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
fcntl$getownex(r3, 0x10, &(0x7f00000005c0)={0x0, <r6=>0x0})
getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000600)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
r8 = getgid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={<r9=>0xffffffffffffffff, r5, 0x0, 0x19, &(0x7f0000000780)='nodevposix_acl_accessem0\x00', 0xffffffffffffffff}, 0x30)
stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, <r10=>0x0})
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0})
r12 = getpgid(0xffffffffffffffff)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000980)={0x0, <r13=>0x0}, &(0x7f00000009c0)=0xc)
r14 = getgid()
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000ec0)=<r15=>0x0)
stat(&(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, <r16=>0x0})
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000fc0)={0x0, 0x0, <r17=>0x0}, &(0x7f0000001000)=0xc)
sendmmsg$unix(r3, &(0x7f0000001100)=[{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000540)=[{&(0x7f00000001c0)="226da8a3a0d507f8086a03637a35b996505f68524c937f56d939a9237793d009641302c95d75f6994aa7d2c6a94f90c74835cea65c8f48c859444097bbe88dd39c162113091f5c308ab89b4972cc0888007b5d5e206535ee1581db01db53c57f4d6144868e9cb079bd2721ab05d280b54c9c69d2e135c4fe03f8bcca5533ad699600fe06242521a86049b546510d19ebc625a17b54fa9e1b", 0x98}, {&(0x7f0000000140)="535e3cd2d1215937e5ed5024ff362c4c2ec25e054f8289dd7fff3d4d5dbf33f0c08406bf07b31ebbe2017ebc5afe4bfcb27409d0814170d20251340f16d15f", 0x3f}, {&(0x7f0000000340)="a8156409e56b447de26797325ec24fcfd30a5aef90c75eef2d8c1984479a442fba5cdfe887d03c6eae952782b849c47c9e132f7d0eadbf705a3c3a0146fea28e5fae711d50765bb197b475b2b7eff65084ba1f4716eb048636f3bf6dfc5e95057b1b724abbf5bf1cb86760a09e9db6", 0x6f}, {&(0x7f00000003c0)="b9b63f55ccfaed0679eccf9c42a3679f2083505b10dc756b44afa4724189481c93fc5dac321a4fe8ab0105f3689e6a7597d3499ff14138", 0x37}, {&(0x7f0000000440)="a508795a5050b9a61923615bf0b7cd38ce8abe0279a13d1fedaa5510b9f852b572b2e0b2984277eeb8b8f908aed454cadf897f5c147d7d6846d570693dd5c356d6049c37fdfad0e404d3512b9f459278ae325a302cb94df2d1f189d10659244a6eb39776da9b6b70f229c9e995c446de09d7e209592c84a7b943e4b04128", 0x7e}, {&(0x7f00000004c0)="40e601b98865ab18c413340127f72c158d696faed8a1158d2bece5ab3a0dfffd494041cd90c9d04637fe63ddd129b7627fa9c7a1a66214b71956a4a58f7d82a9f9f98bcf06f0a84b997bd3e75bf9198663ee94f9735a275fe2f5a102e50fe3ef3216775dfef07feca3a8a45c", 0x6c}], 0x6, &(0x7f0000000a00)=[@cred={0x20, 0x1, 0x2, r6, r7, r8}, @rights={0x20, 0x1, 0x1, [r3, r0, r1, r0]}, @rights={0x28, 0x1, 0x1, [r5, r5, r5, r1, r2, r1]}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @cred={0x20, 0x1, 0x2, r12, r13, r14}], 0xa8, 0x40850}, {&(0x7f0000000ac0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000b40)="7cd2fc95f2dc16098331bf13c41ded29b4e8afee777988082a690fddb2634be08da728f069d51e534fdd3de655e291c17626cf1b41f547544059d27efc6c4f186d8f7998969203ae3f9bcf5630b168", 0x4f}, {&(0x7f0000000bc0)="a17c7ac1610cb4e7eba1d6e2755f9e99a1da2b2494271a87310d122116bc642b2b85f2158d283f268957b246d2fed64f0b14ee856558967e6529976e5529f9c8749d13b8c35aef852fbb7ec48cfbaa209e0eaaf44566e82e19807566ecf7fc0987366d1ce95d007dc2d6d1c36975aa17bf9a757ea0e0c5ef625fdafcab95aebe8c11f5e3f5a280f8c1f5be94b263c3e791a54057b82565d783d5d47584f82f2c8d21eb037160837a1a0c7a204eb99284c2a28cd905744aa611530d5f5bbba8a957a44e36c0c64aab8ee57f0504efe23d4d5a", 0xd2}, {&(0x7f0000000cc0)="bc0a51603cf340ccba8e65493d7d94c104fe8aeb3ce49e22d38f06ef9f6178f4ab32118289e17c1517ba13f18e50b0e8a854cf1952ff29abf3a01ec349c7143c34f30fe104273ad10a5811f3c9390e1a352aff9715fc45388e19621baa7295bd32850c6c06b07a2fa65828cfb213158f0d697fb1b8fd620b0c582a86403f03b443e5f0bd747abc87eee3ce0c", 0x8c}, {&(0x7f0000000d80)="21c61e0a709f548e637702feab40b3b9e7a4a2a88b966746519dedc3a898ceb4c6359aee81dd4c658bfd727889a5e30e9b9bd0bdd17d085fef82482b7861884b4f2e72ad7e5f03caf8ec4246adffb6394af6d0a4d92c953c3323023e41884964ef1f82dfa1847e45fa9dcb515865298778e3c4e9931dfaabcbf1b0a378d1c101021ead6777a365bb423ffbbd805b250d11e2fac09657f428560b2ac1a09fdaed2dd675a6150a0393cb92e9b7a9e46a66b96cd913e2de6fed5260db4f0d3bc2501d679d03ed9367721a5eb181025c9e58626a1367e6ecf7", 0xd7}], 0x4, &(0x7f0000001040)=[@rights={0x38, 0x1, 0x1, [r4, r2, r1, r5, r2, r5, r4, r5, r4]}, @rights={0x20, 0x1, 0x1, [r3, r2, r3, r0]}, @cred={0x20, 0x1, 0x2, r15, r16, r17}, @rights={0x30, 0x1, 0x1, [r4, r4, r2, r5, r4, r5, r4, r5]}], 0xa8, 0x20000080}], 0x2, 0x4000000)
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

[ 1594.435117] Sensor A: Vertical Flip: false
[ 1594.450476] Sensor A: Horizontal Flip: false
[ 1594.464753] Sensor A: Brightness: 128
[ 1594.481448] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1594.497427] Sensor A: Contrast: 128
[ 1594.523337] Sensor A: Hue: 0
09:25:59 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xffffffffffffffc3, 0x240100)
ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000080)={0x80000, 0x0, [0x2, 0x2, 0x40, 0x80000000, 0x48, 0x7, 0x16, 0x6]})
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

09:25:59 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00 '], 0x0, 0x0, 0x0})

[ 1594.533034] Sensor A: Saturation: 128
[ 1594.549314] Sensor A: ==================  END STATUS  ==================
[ 1594.566560] binder: undelivered TRANSACTION_ERROR: 29201
09:25:59 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x2000000, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:25:59 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c460000000000000000003800000000000000e8ff0000000e0eaa8983b47a0960b000200001000000010400000000000003000000000000000000000000120000030000000000000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

[ 1594.694333] binder: 29212:29214 got transaction with invalid data ptr
[ 1594.701077] binder: 29212:29214 transaction failed 29201/-14, size 8192-0 line 3053
[ 1594.721599] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1594.753459] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1594.826040] binder: undelivered TRANSACTION_ERROR: 29201
09:26:02 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:26:02 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f00000000c0)={0x2f7, 0x0, [], {0x0, @reserved}})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

09:26:02 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99800]})

09:26:02 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x40400, 0x0)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000080)={0x8001009, 0x7fff, 0x3})
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f00000000c0)=0x2)

09:26:02 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x3000000, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:02 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00 '], 0x0, 0x0, 0x0})

[ 1597.487729] Sensor A: =================  START STATUS  =================
[ 1597.498856] binder: 29243:29244 got transaction with invalid data ptr
[ 1597.508820] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1597.524072] Sensor A: Test Pattern: 75% Colorbar
09:26:02 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1597.540358] Sensor A: Vertical Flip: false
[ 1597.547318] binder: 29243:29244 transaction failed 29201/-14, size 8192-0 line 3053
[ 1597.555699] Sensor A: Horizontal Flip: false
[ 1597.569265] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1597.577959] Sensor A: Brightness: 128
09:26:02 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x4c4040, 0x0)
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

[ 1597.587648] Sensor A: Contrast: 128
[ 1597.637290] Sensor A: Hue: 0
09:26:02 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00 '], 0x0, 0x0, 0x0})

[ 1597.669143] Sensor A: Saturation: 128
[ 1597.686424] binder: undelivered TRANSACTION_ERROR: 29201
09:26:02 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f36000000bb5d000000000000000000e8ff000000002000010000000104000000000000030000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="49685449a3be5eff519c0678a6f707a2cafd440ed308f7666b0eb51ee807fd4be5f64f410c021c0e461519efcfebb7e37e2f03cfdc47c00651bf30ab064fa6f40dd9e525ac863944ce67af892dab66ca1c7b7282f669788f85aa35c023dcf45c269f7e92e1c335925998", 0x6a}], 0x1, 0x8)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

09:26:02 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x4000000, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1597.712796] Sensor A: ==================  END STATUS  ==================
09:26:02 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
fsetxattr$security_evm(r0, &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@md5={0x1, "de51b2ad0f8ed94248b9297a2767f630"}, 0x11, 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

09:26:02 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1597.781252] binder: 29271:29273 got transaction with invalid data ptr
[ 1597.815657] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:26:02 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x980001]})

09:26:02 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x800, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000180)=0x800, 0x1)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x2800, 0x0)
fcntl$setpipe(r1, 0x407, 0xfffffffffffff55e)
r2 = memfd_create(&(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x4)
write$binfmt_elf32(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000360000000000003800000000000000e8ff4cfa37dcc27597b50000010400000000001f0000000000000010000000000012000003000000000000000000000000000000"], 0x58)
r3 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x22200)
readahead(r0, 0x0, 0x100000000)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='htcp\x00', 0x5)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, 0x0)

[ 1597.858446] binder: 29271:29273 transaction failed 29201/-14, size 8192-0 line 3053
09:26:02 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x5000000, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:02 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x20000203)
r2 = syz_open_dev$radio(&(0x7f0000000380)='/dev/radio#\x00', 0x1, 0x2)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000740)={{0x1, 0x5, 0x5, 0x95f, 'syz1\x00', 0x1}, 0x0, [0x40, 0x5, 0x7ff, 0x2b, 0x6, 0x10000, 0x2, 0xed22, 0x883, 0x547, 0x29f2, 0x81, 0x80000000, 0x5, 0x61, 0x4, 0x4, 0x9, 0x6, 0x6, 0xd6, 0x80000001, 0x40, 0x6, 0xffffffffffff0000, 0xff, 0x8000, 0xf3b9, 0x5, 0x54b, 0x80000000, 0x8, 0xffff, 0x3, 0x3, 0x7ff, 0x9, 0x2, 0x200, 0xc6c, 0x1, 0xffffffffffff8001, 0x1, 0x0, 0x0, 0x6, 0x3f, 0x1ff, 0x1, 0xfffffffffffffe00, 0x100, 0x63e6, 0x1, 0x0, 0x80000000, 0x6, 0x4, 0xed4a, 0x3, 0x401, 0x5, 0x7, 0x9, 0xd4, 0x40, 0x8, 0x3, 0x401, 0x7ff, 0x9, 0x1000, 0x10001, 0x4, 0x4, 0x800, 0x100, 0x8, 0x10001, 0x7, 0x9923, 0x6, 0x80000000, 0x8, 0x2, 0x4, 0x87, 0x6, 0x7593, 0x6, 0x2665, 0x1, 0x7fffffff, 0x1, 0x80000000, 0xffff, 0x5, 0x5, 0x100000000, 0x9, 0x3f, 0x6, 0x722, 0xffffffffffffff01, 0x0, 0x4f68, 0xfff, 0x3, 0x1, 0x7, 0x1, 0xff, 0x0, 0x5, 0x8, 0xfffffffffffff001, 0x3f, 0x80, 0x81, 0x9, 0x6, 0x1360, 0x10000, 0x127, 0x6, 0x0, 0x0, 0x2, 0x80]})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

[ 1597.967613] Sensor A: =================  START STATUS  =================
[ 1597.997568] Sensor A: Test Pattern: 75% Colorbar
[ 1598.008227] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1598.041057] Sensor A: Vertical Flip: false
09:26:02 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00 '], 0x0, 0x0, 0x0})

09:26:02 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:26:03 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x6000000, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1598.061401] binder: undelivered TRANSACTION_ERROR: 29201
[ 1598.101556] Sensor A: Horizontal Flip: false
09:26:03 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000040), &(0x7f00000000c0)=0x68)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x58)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
getitimer(0x0, &(0x7f0000000100))
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

09:26:03 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score\x00')
ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000100))
r4 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

[ 1598.132771] Sensor A: Brightness: 128
[ 1598.147359] Sensor A: Contrast: 128
[ 1598.182723] Sensor A: Hue: 0
[ 1598.183722] binder: 29311:29313 got transaction with invalid data ptr
[ 1598.194478] Sensor A: Saturation: 128
[ 1598.211123] binder: 29311:29313 transaction failed 29201/-14, size 8192-0 line 3053
09:26:03 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
r1 = accept$packet(0xffffffffffffff9c, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14)
getsockopt$sock_buf(r1, 0x1, 0x1e, &(0x7f00000000c0)=""/241, &(0x7f0000000240)=0xf1)
ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000280)={'team_slave_0\x00', 0x2})
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

[ 1598.230364] Sensor A: ==================  END STATUS  ==================
09:26:03 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:26:03 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x00 '], 0x0, 0x0, 0x0})

[ 1598.321502] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1598.343138] binder: undelivered TRANSACTION_ERROR: 29201
[ 1598.371393] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:26:03 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x980900]})

09:26:03 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1c2066b4, 0x10000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x3ff)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

09:26:03 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x7000000, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:03 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x1, 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

[ 1598.461981] binder: 29346:29348 got transaction with invalid data ptr
09:26:03 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1598.531259] binder: 29346:29348 transaction failed 29201/-14, size 8192-0 line 3053
[ 1598.539667] Sensor A: =================  START STATUS  =================
09:26:03 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={<r1=>0x0, r0, 0x0, 0x9, &(0x7f0000000100)='security\x00'}, 0x30)
r2 = getpid()
tgkill(r1, r2, 0x16)
write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4600000000d700000000000000030003006f360040cd0000003800000000000000e8ff00000000200001000000010400000000000003000000000000000000000000120000030000000000000000000000000000005fe59ae50ff90432877c7a9452c306e37540091ba301de40ca0b643f3ceeaeda42e703a5ef5480ab0c36b48aecf33765131a084c8e8983563a0a310a8a3e73c280c196d1409e2595f7160aba1e"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

[ 1598.577270] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1598.580710] Sensor A: Test Pattern: 75% Colorbar
09:26:03 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x7fffffe, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:03 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

[ 1598.624643] Sensor A: Vertical Flip: false
[ 1598.638311] Sensor A: Horizontal Flip: false
[ 1598.657437] Sensor A: Brightness: 128
[ 1598.670163] Sensor A: Contrast: 128
09:26:03 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00 '], 0x0, 0x0, 0x0})

[ 1598.683465] binder: undelivered TRANSACTION_ERROR: 29201
[ 1598.690148] Sensor A: Hue: 0
[ 1598.701909] Sensor A: Saturation: 128
09:26:03 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:26:03 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x20000000, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1598.732523] Sensor A: ==================  END STATUS  ==================
[ 1598.759540] binder: 29379:29380 got transaction with invalid data ptr
[ 1598.767982] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:26:03 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
pipe2(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x84000)
ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000300)={0x3, 0x0, [], {0x0, @bt={0xfffffffffffffffd, 0x2, 0x0, 0x2, 0x1000, 0x8, 0x81, 0x101, 0x6, 0x1e, 0x3, 0xc2, 0x6, 0x80000001, 0x8, 0x8}}})
accept(r2, &(0x7f0000000100)=@nl=@unspec, &(0x7f0000000180)=0x80)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000280)='/dev/snd/controlC#\x00', 0xffff, 0x40000)
r3 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4)
bind$inet(r3, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10)
sendto$inet(r3, &(0x7f0000000a00)="ba", 0x1, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@multicast1, @in6}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f00000004c0)=0xe8)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000200)=""/122)
mq_timedsend(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x10000, 0x0)
ioctl$CAPI_REGISTER(r4, 0x400c4301, &(0x7f0000000080)={0x9, 0x7, 0x57})
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

09:26:03 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x980901]})

[ 1598.845276] binder: 29379:29380 transaction failed 29201/-14, size 8192-0 line 3053
09:26:03 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1598.920310] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1598.921765] Sensor A: =================  START STATUS  =================
09:26:03 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:26:03 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z\x00 '], 0x0, 0x0, 0x0})

[ 1598.972352] binder: undelivered TRANSACTION_ERROR: 29201
[ 1598.993117] Sensor A: Test Pattern: 75% Colorbar
[ 1599.006393] Sensor A: Vertical Flip: false
[ 1599.027456] Sensor A: Horizontal Flip: false
[ 1599.048420] Sensor A: Brightness: 128
09:26:04 executing program 0:
r0 = socket$bt_rfcomm(0x1f, 0x0, 0x3)
getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000340), &(0x7f0000000380)=0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000001200000300000000000000000000000000000000000000"], 0x58)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000003c0)={0x0, 0x1, 0x8, 0x0, 0x4, 0x40, 0x10000, 0x6, 0xffffffffffffff66, 0xfffffffffffffe93, 0x9, 0x1ff, 0x0, 0x7ff, 0x0, 0x0, 0xfffffffffffffffc, 0x133c7d5a, 0x67})
munlockall()
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x2080, 0x0)
execveat(r3, &(0x7f0000001800)='./file0\x00', 0x0, 0x0, 0x80000ffc)
r4 = open(&(0x7f0000001580)='./file0\x00', 0x800, 0x1)
ioctl$PIO_UNIMAPCLR(r4, 0x4b68, &(0x7f00000017c0)={0x4, 0x9, 0xfff})
r5 = accept$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e)
sendmsg$unix(r5, &(0x7f0000001940)={&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001700)=[{&(0x7f0000001840)="1f1c83593c7a4d7b3f6b86550bff89a05f36325913c883eaac0cdda37e7b435a27eb6f4cd643be19bef7f1d9ff229a6abeb34393849c1218fcdf714b37ca742b8a8edc5fabfb1020d6a808748efcff5202a764cb3528fe780168d97785dc44420068093463114ace0fb8138a44ed237b99e9a98fc7c49b3f35ca409d3600d65b1abfa83267f50bff148a31d2e2612b54fa08f521a68dde5ac841f9265389e6c269e726cba7e595f84a05f45a98307f7ef50b2bb77fe85ccf35e194af107d6369885804479b1e31519ba8bc7b65b6a54e8e6e965cec358437c3fc647af0f3", 0xde}, {&(0x7f0000000240)="e5c9909a8b4a9f77c263723b300b848b8011dd7353a4930571e5c6c3c7872900d6444e2df12438f7e7b89b7d4c821cd8234f", 0x32}, {&(0x7f0000000400)="7f16e7d90457644e94db636619a89a1ce426eb8b4da8aee3ba8048d5c6b234d9e9ae6d3fa3fe10b3ac875ef51856ad8de9a0a27f36ac5568d4fe6afd505d2141cd51bffc3d008b98b71e69f58c4798a5815f70e326b3aa72e67fdbd0a976cc1a965b58936ad0f598be7be4a324780d2d6c91450a325d35c785e5c5c415d42c9481d5e4317235d11797c39bb86f5badbf8e132a98c8c5737bdadaea3f9ae0913e58f7d5accaedb6add82391b635e3a9c9a637631afd4f8f", 0xb7}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f0000000280)="8601c565f2c0054b8cb532afa7cfa911827f6d487b226641528734897babfdee09e1c0ef2399d4c7a463105b4612ba5cbb758366f2019d8b892bf58c", 0x3c}, {&(0x7f00000014c0)="c85ba78a0cf7c381526589fcdbf9fa56f901a1fc5ee582af9189f5d4d5b8a0aa5c36e4f66940d73fd21150299ef5972d1d4daf1ab9498756e56b8414f4a3c1abd97f198a5887f02fdf023b931ddafd2607684d12a574fb79921bb46d88ec1e4c3acd6a6f0af6d1c76a153adc348e2b14ff13e946c2265f8f5af9d1cda4a00db382cbe475b0b5a03def3c1e", 0x8b}, {&(0x7f0000000000)="191377e99f15962d757d18641470fb8fa646079de5d5f20be665f402487b53d6ba9940b5a1d2", 0x26}, {&(0x7f00000015c0)="86a24b3f6ce8f305f1c416ac3ebd97516426f0582c897b3e0727194cc7e5c045f0f9a5fc275eb0396c297ca756bd8f24dfa560eb553053f9570dcdbdf753cf35621fe44fdad5e8e2ebc524ecfaf50337e6d7cb3deb7da7f9264f3d1e3ba909b32727b5309ca05768e2089c587800f65353ea7579209eaa0cabdf40df0e11b917f6757095cc555584b1dce55968fc2aa3fbce2282b1589d66800470c7baee7daf907cd14e70918bd208dcf8f61f4aa2cf623d3cce4b", 0xb5}, {&(0x7f0000001680)="1a84dd1a3d6fecf5702de3ce99d8319d244777d6dff431bafbbfa37dc89cbf674cd30931d2aafe76a030912338eaf534b601d660fd6298d41e0ad87a7bcaa1574bedb98ee63b032bc77c45392651f7764224402049fc0a5bd279726598688ad80607bbb5bd864e", 0x67}], 0x9, 0x0, 0x0, 0x4}, 0x8000080)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)
connect$caif(r1, &(0x7f0000000040), 0x18)

[ 1599.070646] Sensor A: Contrast: 128
[ 1599.086417] binder: 29408:29409 got transaction with invalid data ptr
[ 1599.094391] Sensor A: Hue: 0
[ 1599.099408] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1599.112956] Sensor A: Saturation: 128
09:26:04 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1599.117564] binder: 29408:29409 transaction failed 29201/-14, size 8192-0 line 3053
[ 1599.121845] Sensor A: ==================  END STATUS  ==================
09:26:04 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x40000000, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1599.242376] binder: undelivered TRANSACTION_ERROR: 29201
[ 1599.320436] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:26:04 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x84, r4, 0x409, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x3c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffffffffffd}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20004810}, 0x20000000)
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

09:26:04 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x980902]})

09:26:04 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00%'], 0x0, 0x0, 0x0})

09:26:04 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)
r1 = getpgrp(0xffffffffffffffff)
process_vm_readv(r1, &(0x7f0000000040)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/179, 0xb3}, {&(0x7f0000001300)=""/205, 0xcd}, {&(0x7f0000001400)=""/220, 0xdc}], 0x3, 0x0)

09:26:04 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:26:04 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x60000000, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1599.495729] Sensor A: =================  START STATUS  =================
[ 1599.516770] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1599.528843] Sensor A: Test Pattern: 75% Colorbar
[ 1599.538909] binder: 29435:29447 got transaction with invalid data ptr
[ 1599.541978] Sensor A: Vertical Flip: false
[ 1599.565552] Sensor A: Horizontal Flip: false
[ 1599.580711] Sensor A: Brightness: 128
[ 1599.592101] Sensor A: Contrast: 128
09:26:04 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:26:04 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
prctl$PR_SET_UNALIGN(0x6, 0x1)
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xbe21, 0x4000)
r1 = accept$alg(0xffffffffffffff9c, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x80000000})
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

[ 1599.596190] binder: 29435:29447 transaction failed 29201/-14, size 9472-0 line 3053
[ 1599.608920] Sensor A: Hue: 0
[ 1599.635976] Sensor A: Saturation: 128
09:26:04 executing program 3:
r0 = memfd_create(&(0x7f0000000440)='\xe87y\xd8\x0e\xfaE\xfb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.\x1d\x8f\x87\xe1\xdc\x1b\xe9>WB\xb8\x12B\xcbj2g\x95\xa3\t\x9f\xb8~\xbdL\xd1\xe1l7\x96\x88\x89\x83\xd2\xeb\xec3\xf9,9\x026\xfb\t\x0e\xb3k}~e#\x15\xa5N&<\xb3\xb6r\x9d\x8fq\xaa,\xd8\xbe\xd4\x8a\xd9\xdd?\xff\xb3\v\xde\x897\xa4\xfbz\x84\bt\x88\x96}F\x9aQ\xeb(\xb6\xc6h\xbf\xcb]\x05E:\xa0p\x98\xbc0\xba\x14\xa4\xb4\xeb\xd00\x05w.\xdf\x12\x90T\r\f\x86\xb9\xdf\xb3\xeb\x04\xe2_\xf5\x0fi\xfe\xeaAQ\xdbj\x9f\xf9\xd8\xf3\xf6\x9a\xda\x15\xd0\xd9\x8b}E\xf1\x0e\x8f\\\xbf\xb9\x0fr\x12\xff\x8c\xf8~\x1f\xb4\xb1(p\xb5\r\xccz1\x12\xc45A=\xb3\x18Cc1\\\x1b4\xd9\xa8\xb4\vQ\x05w:R}\x85obR\xbb\x8d\xa8\xcbv]\xa4\x0f\x02\x04m\x91@\xe1i]\xd8\x7f\xd3\xa4\xebB\xc3hrpg\x7fM\xf2p\xb0\x02\xa15\xa1O\xc0\xc1/L\x18%N\xc4\xe2', 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x82800, 0x0)
ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f0000000100)={0x4})
r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = dup2(r2, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

09:26:04 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0xfeffff07, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:04 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0)
ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000080)={0x0, @reserved})
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

09:26:04 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00/'], 0x0, 0x0, 0x0})

[ 1599.705599] Sensor A: ==================  END STATUS  ==================
[ 1599.739921] binder: undelivered TRANSACTION_ERROR: 29201
[ 1599.778397] Sensor A: =================  START STATUS  =================
[ 1599.801188] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1599.820299] binder: 29472:29475 got transaction with invalid data ptr
09:26:04 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1599.832922] Sensor A: Test Pattern: 75% Colorbar
[ 1599.837750] Sensor A: Vertical Flip: false
[ 1599.842025] Sensor A: Horizontal Flip: false
[ 1599.848961] Sensor A: Brightness: 128
[ 1599.860725] Sensor A: Contrast: 128
[ 1599.861174] binder: 29472:29475 transaction failed 29201/-14, size 12032-0 line 3053
[ 1599.869578] Sensor A: Hue: 0
[ 1599.892933] Sensor A: Saturation: 128
[ 1599.931917] Sensor A: ==================  END STATUS  ==================
[ 1599.969501] binder: undelivered TRANSACTION_ERROR: 29201
09:26:04 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00W'], 0x0, 0x0, 0x0})

09:26:04 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000400}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x6c, r1, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'eql\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x98}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}]}, 0x6c}, 0x1, 0x0, 0x0, 0x50}, 0x80)
r2 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
mkdir(&(0x7f0000000040)='./file0\x00', 0x18)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

09:26:04 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000340)='/dev/snd/seq\x00', 0x0, 0x4141)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000540)=<r3=>0x0)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000380)=<r4=>0x0)
setpgid(r3, r4)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r5 = dup2(r1, r0)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r6, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, 0x0, 0x8001, 0x0, {0x8}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44014}, 0x8010)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r5, &(0x7f0000000000)=[{0x2, 0x0, 0x1, 0x0, @time={0x77359400}, {0x0, 0x401}, {}, @time=@tick=0x1}], 0x30)
prctl$PR_GET_KEEPCAPS(0x7)

09:26:04 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0xff000000, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:04 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x980903]})

[ 1600.058025] binder_alloc: 29489: binder_alloc_buf size 22272 failed, no address space
[ 1600.087029] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:26:05 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1600.102754] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
09:26:05 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = dup2(r0, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)
fdatasync(r0)

[ 1600.134112] Sensor A: =================  START STATUS  =================
[ 1600.145472] binder: 29489:29490 transaction failed 29201/-28, size 22272-0 line 3035
[ 1600.156925] Sensor A: Test Pattern: 75% Colorbar
09:26:05 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:05 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000030003006f3600000029575a584912dcc8a0c211640000e1370000000000000000200001000300000000000000000000000012000003000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
open(&(0x7f0000000040)='./file0\x00', 0x200000, 0x8)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)
openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x2100c0, 0x0)

[ 1600.208618] Sensor A: Vertical Flip: false
[ 1600.227438] Sensor A: Horizontal Flip: false
[ 1600.232062] Sensor A: Brightness: 128
[ 1600.251556] binder: undelivered TRANSACTION_ERROR: 29201
09:26:05 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`'], 0x0, 0x0, 0x0})

[ 1600.263869] Sensor A: Contrast: 128
[ 1600.267667] Sensor A: Hue: 0
[ 1600.293077] Sensor A: Saturation: 128
09:26:05 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1600.329561] binder_alloc: 29516: binder_alloc_buf size 24576 failed, no address space
[ 1600.340938] Sensor A: ==================  END STATUS  ==================
[ 1600.384679] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1600.406026] Sensor A: =================  START STATUS  =================
[ 1600.413927] binder: 29516:29517 transaction failed 29201/-28, size 24576-0 line 3035
09:26:05 executing program 0:
r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x400, 0x8000)
ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000080)={0x1})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

[ 1600.432258] Sensor A: Test Pattern: 75% Colorbar
[ 1600.445488] Sensor A: Vertical Flip: false
[ 1600.483710] Sensor A: Horizontal Flip: false
09:26:05 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h'], 0x0, 0x0, 0x0})

[ 1600.508975] binder: undelivered TRANSACTION_ERROR: 29201
[ 1600.537562] Sensor A: Brightness: 128
[ 1600.541494] Sensor A: Contrast: 128
[ 1600.565468] Sensor A: Hue: 0
[ 1600.568799] Sensor A: Saturation: 128
[ 1600.585290] binder_alloc: 29528: binder_alloc_buf size 26624 failed, no address space
[ 1600.591364] Sensor A: ==================  END STATUS  ==================
09:26:05 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x3)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

[ 1600.612253] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
09:26:05 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x980914]})

09:26:05 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000000020020"], 0x0, 0x0, 0x0})

[ 1600.719886] Sensor A: =================  START STATUS  =================
[ 1600.770681] Sensor A: Test Pattern: 75% Colorbar
[ 1600.777663] binder: 29538:29539 got transaction with invalid data ptr
[ 1600.797261] Sensor A: Vertical Flip: false
[ 1600.801704] Sensor A: Horizontal Flip: false
[ 1600.833138] Sensor A: Brightness: 128
[ 1600.853153] Sensor A: Contrast: 128
[ 1600.856938] Sensor A: Hue: 0
[ 1600.860159] Sensor A: Saturation: 128
09:26:05 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000000030020"], 0x0, 0x0, 0x0})

[ 1600.886214] Sensor A: ==================  END STATUS  ==================
09:26:05 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x980915]})

[ 1600.982731] binder: 29544:29545 got transaction with invalid data ptr
[ 1601.065500] Sensor A: =================  START STATUS  =================
[ 1601.102617] Sensor A: Test Pattern: 75% Colorbar
[ 1601.121093] Sensor A: Vertical Flip: false
[ 1601.130151] Sensor A: Horizontal Flip: false
[ 1601.156120] Sensor A: Brightness: 128
[ 1601.160127] Sensor A: Contrast: 128
09:26:06 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

[ 1601.176978] Sensor A: Hue: 0
[ 1601.198255] Sensor A: Saturation: 128
[ 1601.212759] Sensor A: ==================  END STATUS  ==================
[ 1601.239303] Sensor A: =================  START STATUS  =================
[ 1601.263300] Sensor A: Test Pattern: 75% Colorbar
[ 1601.279450] Sensor A: Vertical Flip: false
[ 1601.307365] Sensor A: Horizontal Flip: false
[ 1601.323303] Sensor A: Brightness: 128
[ 1601.342205] Sensor A: Contrast: 128
[ 1601.352667] Sensor A: Hue: 0
[ 1601.362876] Sensor A: Saturation: 128
[ 1601.374845] Sensor A: ==================  END STATUS  ==================
09:26:06 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:06 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000000040020"], 0x0, 0x0, 0x0})

09:26:06 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00001]})

09:26:06 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:26:06 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x400000000000000)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x8b8f, 0x10000)
ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000100))
r3 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$TIOCLINUX6(r2, 0x541c, &(0x7f0000000140)={0x6, 0xfe54})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x2000400200)
r4 = dup2(r2, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

[ 1601.598565] binder: 29560:29561 got transaction with invalid data ptr
[ 1601.637913] Sensor A: =================  START STATUS  =================
09:26:06 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000000050020"], 0x0, 0x0, 0x0})

[ 1601.662683] Sensor A: Test Pattern: 75% Colorbar
[ 1601.667480] Sensor A: Vertical Flip: false
[ 1601.671743] Sensor A: Horizontal Flip: false
[ 1601.758324] Sensor A: Brightness: 128
[ 1601.774014] binder: 29570:29571 got transaction with invalid data ptr
[ 1601.775284] Sensor A: Contrast: 128
[ 1601.794664] Sensor A: Hue: 0
[ 1601.801260] Sensor A: Saturation: 128
[ 1601.809981] Sensor A: ==================  END STATUS  ==================
09:26:06 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:26:06 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f000]})

09:26:06 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000040))
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

09:26:06 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000000060020"], 0x0, 0x0, 0x0})

[ 1602.018347] IPVS: ftp: loaded support on port[0] = 21
[ 1602.038771] Sensor A: =================  START STATUS  =================
[ 1602.057586] binder: 29583:29585 got transaction with invalid data ptr
[ 1602.082665] Sensor A: Test Pattern: 75% Colorbar
[ 1602.087913] Sensor A: Vertical Flip: false
09:26:07 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1602.111516] Sensor A: Horizontal Flip: false
09:26:07 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00 '], 0x0, 0x0, 0x0})

[ 1602.175387] Sensor A: Brightness: 128
[ 1602.209201] Sensor A: Contrast: 128
[ 1602.242897] Sensor A: Hue: 0
[ 1602.246256] Sensor A: Saturation: 128
[ 1602.255541] binder: 29591:29592 got transaction with invalid data ptr
[ 1602.265817] Sensor A: ==================  END STATUS  ==================
[ 1602.280452] device bridge_slave_1 left promiscuous mode
[ 1602.287350] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1602.300468] Sensor A: =================  START STATUS  =================
[ 1602.331757] IPVS: ftp: loaded support on port[0] = 21
[ 1602.354422] Sensor A: Test Pattern: 75% Colorbar
[ 1602.359221] Sensor A: Vertical Flip: false
[ 1602.397068] device bridge_slave_0 left promiscuous mode
[ 1602.403118] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1602.418110] Sensor A: Horizontal Flip: false
[ 1602.430172] Sensor A: Brightness: 128
[ 1602.439410] Sensor A: Contrast: 128
[ 1602.452647] Sensor A: Hue: 0
[ 1602.455813] Sensor A: Saturation: 128
[ 1602.459728] Sensor A: ==================  END STATUS  ==================
[ 1602.539518] device hsr_slave_1 left promiscuous mode
[ 1602.577799] device hsr_slave_0 left promiscuous mode
[ 1602.629118] team0 (unregistering): Port device team_slave_1 removed
[ 1602.641191] team0 (unregistering): Port device team_slave_0 removed
[ 1602.655307] bond0 (unregistering): Releasing backup interface bond_slave_1
[ 1602.709970] bond0 (unregistering): Releasing backup interface bond_slave_0
[ 1602.840124] bond0 (unregistering): Released all slaves
09:26:07 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000440)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x24}}, @in6={0xa, 0x4e24, 0x3, @loopback, 0x7f}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e24, 0x9dd, @local, 0x1}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e24, @rand_addr=0x7}, @in6={0xa, 0x4e24, 0xffffffffffff344f, @empty, 0x128}], 0xc4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r4 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x8})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

[ 1603.109491] chnl_net:caif_netlink_parms(): no params data found
[ 1603.270982] chnl_net:caif_netlink_parms(): no params data found
[ 1603.280582] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1603.287280] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1603.296195] device bridge_slave_0 entered promiscuous mode
[ 1603.328137] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1603.334796] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1603.342195] device bridge_slave_1 entered promiscuous mode
[ 1603.356361] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1603.363086] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1603.370600] device bridge_slave_0 entered promiscuous mode
[ 1603.391942] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1603.398832] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1603.406491] device bridge_slave_1 entered promiscuous mode
[ 1603.415643] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 1603.444303] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 1603.476974] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 1603.500841] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 1603.517684] team0: Port device team_slave_0 added
[ 1603.528342] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 1603.542036] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 1603.559766] team0: Port device team_slave_1 added
[ 1603.587806] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 1603.596833] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 1603.604754] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 1603.612179] team0: Port device team_slave_0 added
[ 1603.635974] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 1603.643614] team0: Port device team_slave_1 added
[ 1603.695999] device hsr_slave_0 entered promiscuous mode
[ 1603.743035] device hsr_slave_1 entered promiscuous mode
[ 1603.833243] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 1603.840278] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 1603.857153] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 1603.869308] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 1603.891112] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1603.897557] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1603.904246] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1603.910617] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1604.076140] device hsr_slave_0 entered promiscuous mode
[ 1604.122925] device hsr_slave_1 entered promiscuous mode
[ 1604.193259] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 1604.200317] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 1604.224485] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1604.242716] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1604.271519] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[ 1604.318308] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1604.347928] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 1604.377012] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[ 1604.384436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1604.391398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1604.403716] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1604.417804] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 1604.428194] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 1604.434430] 8021q: adding VLAN 0 to HW filter on device team0
[ 1604.444600] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[ 1604.452151] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[ 1604.468723] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[ 1604.481877] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 1604.500018] 8021q: adding VLAN 0 to HW filter on device team0
[ 1604.509100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1604.523456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1604.530489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1604.538886] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1604.546674] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1604.553098] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1604.560102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1604.568393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1604.576337] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1604.582764] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1604.594142] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[ 1604.603535] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[ 1604.610683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1604.619347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1604.627625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1604.635528] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1604.641879] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1604.650774] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[ 1604.658961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1604.666787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1604.679700] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[ 1604.692013] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[ 1604.702448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1604.717249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1604.726378] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1604.732793] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1604.740241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1604.751016] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[ 1604.760968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1604.774187] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1604.784773] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[ 1604.804025] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[ 1604.810928] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1604.832021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1604.840372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1604.848343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1604.858477] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[ 1604.866435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1604.874893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1604.882666] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1604.892859] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[ 1604.903520] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[ 1604.911765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1604.920265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1604.928372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1604.936688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1604.949448] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[ 1604.960014] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[ 1604.972734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1604.980675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1605.003722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1605.011350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1605.020287] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1605.035737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1605.052166] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[ 1605.070102] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[ 1605.076848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1605.086255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1605.099691] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1605.114139] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1605.120151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1605.138370] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[ 1605.148410] 8021q: adding VLAN 0 to HW filter on device batadv0
09:26:10 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:10 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00 '], 0x0, 0x0, 0x0})

09:26:10 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:26:10 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})

09:26:10 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
bind(r2, &(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x3, {0xa, 0x4e20, 0x2, @mcast1, 0xfffffffffffffae3}}}, 0x80)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000000c0)=0x8, 0x4)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000340), &(0x7f0000000140))
setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000200)={0xb6, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x3, 'rr\x00', 0x0, 0x80000001, 0x3b}, 0x2c)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x101000, 0x0)
write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x2}, {}, @connect}], 0x30)

09:26:10 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x410002, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in6=@local}}, &(0x7f0000000240)=0xe8)
fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, <r3=>0x0})
r4 = getpgid(0xffffffffffffffff)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003200)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000003300)=0xe8)
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000036c0)=<r6=>0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000003700)={{{@in6=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000003800)=0xe8)
fstat(r0, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000003940)={[{0x4, 0x1, 0x91, 0x8, 0x10000, 0x7, 0x3, 0x7, 0xffffffffffff467f, 0x1, 0x0, 0x40a, 0x7}, {0x1000, 0x9, 0x8001, 0x0, 0xffffffff, 0x3ff, 0x100000001, 0x628, 0x9, 0x4, 0x8, 0x4, 0x5}, {0x6, 0x9, 0x6, 0xfdbe, 0xb7, 0x20, 0x5, 0x2, 0x7, 0x9, 0x91, 0x1, 0x1}], 0x4})
sendmsg$netlink(r1, &(0x7f0000003900)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbff, 0x100}, 0xc, &(0x7f0000003640)=[{&(0x7f0000000300)={0x1504, 0x2c, 0x3, 0x70bd2b, 0x25dfdbff, "", [@nested={0x230, 0x2d, [@generic="8c83fafb50daf91eb33901ba1bac685a34070b21b0f51b4643adb1fa76296b73fffaa1ae84b4ac0f77aa9453dc42b714dfb19aff778617df6afd0e114880bc18f79cc9be9d10bc7e3a33e18efef98e1877923d6a2871c1a02a8e51b50e2c46f2f955ad30459bba68103ffb29ef09dbf5fcdd6f720ee18438fbdecaaedaeb0d8c7fdd21d2d3d527be917482f0b1a6586dd84fe56518ada84d96bebbe3e18c0cac526427884d540746e951d6495abb205e921730d071e15a7839", @generic="a8325edc6ded418da8a53396dce3885a24eb3383d0163512ef541af4c286f0a870e05ac48969f60a3c08e79662baab42e04f3a320419aae25a765bbf869cabd3bb81599e119c7a36c32f10e05420a5fae7da664f4b7023f4be3570b0417db16fb4035146c10c2dc34752639c18b297195c6d1eb7cb20377714d864fa200cb299835326f5a91c54d216c2ead9f38b39aedca70e77e56ff38ca89221cc5118a29321a67c9621a33d655b05298d861a8786cb7c5eee34bba5513850293b3913b26a5d85a261c87ad5e91e5fdb238c9b31b8dbc96721b5d6377a1ce6b1ef5e5486e6f47081bc569f0c31e5a6ef1b622c7eff2461274ff1", @generic="3f4d7c58affae7b78c73ab3338276ef0e6f3602dcc925cc11fc656a1487576d6ab2dc06abefaa9fd4c209cf7aedada8a3e5c0a1b42c6e5440bad5a416dd532ec636f2c9046f6e3b354901477e8f72e5f60f49945f97171b6f988b936bce6586dbd0af535af700666b809bfeeb825ae87b95bea796f9bf47ae033196034"]}, @nested={0x1260, 0x3, [@typed={0x4, 0x5a}, @generic="7b9e83fdb6c11cf4cf8c1e20b6aae718c6b767609afbdf6a4367a1b1d40653d2be408a01b09d2dc4ed5a774c6c3b3715feaf36f05ee9d6692906e460a1e6cd668ead14998113627a4d6f363f45219aad7a3898e15f", @generic="d58bd865eb233fe284e08288f94f930934a3a64719a9b4e28c2b6a5420a49e783019f9b68d98ab23d7c16869a810a89a7dd16a2c5b0c964137ad2d52d67f6a474aacd2eb52df40ea5aa3a58d74469440f337e7a9a1d9feaac7d01759ada5955d80416ab515e21d403e6f75efa68e19c79f40ba6cd3d556661ae958652723fe740113f1a0d11838cb2b52eb8c8f04ed389edbd450ac", @generic="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", @typed={0x14, 0x84, @ipv6=@loopback}, @generic="d06a0a35d03f0202540a2f8e7686c684d16f02c8e77e8b11b650f537abb0cb8882cb2b9f03d1c771ce1cc101a4dff54a0bca6ab3278810d84832554ac53695b98037c036a91bf77062db3b2d6e35078a9fe77aaf1b4fcfd0a32176a3af7c00d7b5c03661fecdd5a464", @typed={0xc, 0x70, @str='ppp0(]\x00'}, @typed={0x8, 0x6, @uid=r2}, @generic="9b1f6a44c284cb9379d99969ba6b797847bbb2b71673bbc1670f36a9a8f2712a3f3425ad06169c322d48fc4a0080df6a0c57f8ef566b3a28be878cae912f3c893ddeb1e9c74a9001a07f652b317241215f9238bfa1857e9d6cc676c442cae871022d66b34bf24465eb54943ed69951a7e27cd839d07d58c20780a23a09554ace5206d9d714f3b2c32b64f54535d4dd68fd6154b0b6b032d59cb56eadaced3ab796becdff5575f58c96fa285fab97a20e7553ae137976f8b5affc2fe3c4b11a7c16ecce4aa80cc0a96aaee1e0124bb8019e2e17c5670cae1138f2a4"]}, @nested={0x58, 0x6a, [@generic="31a2d649ddfcb69a87ee40f7671f7f6ef3e3a72fb91fa574a3abaf9792683118366e5c5569aeecd985484f234d2bf363d5a23581f31d9a2c5bd2f455f629271904246fd460de4b9526", @typed={0x8, 0x58, @u32=0x4a0}]}, @typed={0xc, 0x37, @u64=0x5}]}, 0x1504}, {&(0x7f0000001840)={0x2c0, 0x42, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x1c8, 0x78, [@generic="25c2dc970d2379606b9983b8125b5b3d144b1bd1c32d93e70ea8c4a975846eee1f47c7401f9f9839daee2190e9b1403cc3c20253723e8eef0c6d8fb55a19c35b84dfa90127bfc87b02ad444593b116cd8127442583f56796211c44fd6a5a5b5e5cb6e1155eac699417e3a1a1ffdf3735286f13ddd29a1afa14d650429f2b6df07c86ec9c8072b537d14825ea125f8fe1492e111664c0aa455c1e5bcbe66238d53aad120bd16985a299bba94df123d05753bfbd7b3564a6a6813c80b99668789dab7af4efe9749ed423a7ea1f8e62a9c6b5f3", @generic="bd185cea1547b3b8ab20e7a0c453166df91974276557083e7ced01f8ecf286623818b592ea2e1ca56b8b1802cfd908a034376841ee8c84c558acd504520bd8e10da458ca77f07ba768c69665d2d3a880555dd0704b8775923dcefeefc0c72c6c5111d95a3a8059508a37bfda2f887917b40976610e9bf669a60b08c070343d40fd581a23e4291d7e642e6e8f89a8e6608d4bb26473231dd57e4d0d21881ad75a948146fc1445f552b68f690bc525818b7f8854b2ab941e42f5a0627c138014fb2b0a5845479cd3fe", @typed={0x4, 0x24}, @generic="8e6ff97fa55cf3ece3b53ea437e9c012592f7e698c", @typed={0x8, 0x15, @fd=r0}, @typed={0x8, 0x2b, @fd=r0}]}, @nested={0xa8, 0x6, [@typed={0x4, 0x1a}, @generic="bc7689a43431e0c2a42d6de5a3fc657488873f2546cd858f3c71a439e7ecca5d0b1401b66804438e4c814303ca4ff572fadc70451e082170f8ae93cb372ca127070e4541dfc8a14116ddb944daa76bb44dc527d571adcaa088ac2714be0ecbb7cec026ed8ca27831cb9d084261b95ec4b3a69d3c78daa143baaa5a6c14f374595a281c98a2436c6d55e8c93a77f3cd5c351da52ea793f3522c0d1897c019"]}, @typed={0x8, 0x4e, @pid=r3}, @typed={0xc, 0x36, @u64}, @nested={0x2c, 0x20, [@typed={0x14, 0x50, @ipv6=@ipv4={[], [], @multicast1}}, @typed={0x14, 0x30, @ipv6}]}]}, 0x2c0}, {&(0x7f0000001b00)={0x3fc, 0x17, 0x0, 0x70bd2d, 0x25dfdbfc, "", [@generic="65933c53bffe046808eb264afd6b5a66c37bc70488338262a9a24a49a3e6b00840d58ebe6a310a31608dae85c0ee05f6338f1911cbf9826bbb0cc0e2abe087429028f03eefc1354cc400c450a1c88d5e1783bdccca9a2d09631b7df35dfe9e7ce2cc41", @generic="7062b5c749f5760ca65a45eb4639777d84d676e9500511283ba42244a43f7006168d52dac171c3e5a5e29eafd570425c2e1c15358c89cd2896b577f5b9de52cd82b586304cca8fd0a25e38c996430e1196766455a52cdecaf12fa70b94b383e8e157c27f3c82132407052345f2d17f0f54ca39144f219c74e0673b2ba02eb39a1d13fef40384bad16e7db022e7681daa42af4119704ffa1c280bbb4d3c89568612f6fc6db10bc97500e38d7a21ac4c3fa3605bf5cfdb89a2a34426d5d4f783f1bf34c4f5c7f95be58303a48e", @nested={0x1d4, 0x20, [@generic="a449719deaad7556a543167af29db47a331cab12b49545be4f09895b96ef5e3e17034bb49e8f6ec79bee0718e268e586dda2299ac68c023e149b9cb413538120a811aef089c8c3fec8d9403945770c05ace9", @typed={0xa0, 0x8f, @binary="cbf3ea237d7777b25939e861f0ddf73d1aeebe8be8a2847fdb7aa9c9453e17815d91c94bc56b0f74d9af9eb8c50e03f192708e6b20e535f63d923bc3d672b1db6e4c249ec6885f3fd4f81d04b0081d7dd1928696e2be9381dfa736abbe0d72187c14ce6de828388e5fd1575716dd175bffa6b43a3f6195e1066231a533ce719fab7c705711ec0f78fca05e1bfb4a47a8abe77c2ec61f634f72"}, @generic="c05ae6bb437862f66b49416f97d7d01348ee049e1b6aa155fc408c047830ca2ddb1b2e807717dfc659ffd2b39aadc73a2fd459024ac40192cb503dd112d0713d3851bbc919eec6b230e704f796339fa149227401587853372bbfbb834b2fbad49a22e426fe4e95d5da803c88e5b579aa1ddba92b272a0a6de14a4111df629d03dee43af6db96d08bcde56751ef3d2f71133ab52428b8d6b492ffe38cf8b0258808cb202c2d3693d3105f563c0ccbe516854836968050ebd3", @typed={0x8, 0x5a, @pid=r4}, @typed={0x14, 0x30, @ipv6=@mcast2}, @typed={0x8, 0x5a, @fd=r0}]}, @typed={0x8, 0x38, @ipv4=@rand_addr=0x7}, @typed={0x8, 0x13, @ipv4=@loopback}, @generic="736a1ce7bc881223a8cef4d3fd6c856c1ebb4414b82ac02885ddd467ecb24719e98397e820c72625ee92859613176e2d37dfe7e4a4805aa55ae8054b1157fb08bc090b5dfba68febd766c2d32f914694660531aca14c1d9255c5704fafaa6437eccf07cef854fdc1c5d5156d30daf172d04e8cc099a0326a41e88e16814634be0305b4ca07693e2d56227fdab0d97a50a41cc14d207cb938fa2593716a8f03d9cc25268d3745d0ca85a41bc7a78bc08a65c14e422c31d91fd420d610bff1b624701ee8e2018a6b74684beae923f65552ff308878ef34d213f2"]}, 0x3fc}, {&(0x7f0000001f00)={0x1290, 0x2f, 0x0, 0x70bd26, 0x25dfdbfd, "", [@generic="6ea604ea2310fd21fb23939150e2ca4f663eaa224016ebcb8a7b879ab94e0fa806666176b2a5a3312b2c2d5c91ccf82e11ad1562c6bd0a9e2fc79bf3e8c67c61655028669d754813600650869020f1b2b646f87e48b1b516040751b308e323bdb1f7ca11459dbaff54c0ebedf019af13fe9f06e0e6867b777fdad3a5ea63f653bd056119e661a41e4eeb7d0c37b17ff8c340ba41b02f0d6feed7", @typed={0xc, 0x96, @u64=0x64e0}, @nested={0x10f8, 0x7a, [@typed={0x14, 0x56, @ipv6=@ipv4={[], [], @multicast2}}, @typed={0x8, 0x6c, @ipv4=@loopback}, @generic="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", @typed={0x14, 0x34, @ipv6=@local}, @generic="c1bcda844dc684c7bf65d55e08a8012efd8821c0dc810c79247471842859ef5f6b7a7da3f77559f7002a6ff90f0625f8db63f7cb0de83016f7ae981d4ff8136d53fe831f406dc1b7eb6a998831732a2843b0f689b64d68737ba5f2d89fd6cfa0d3dd2a2f22fca67ca3a708abb0ffafd2ac1fd37e633846f83842a959a17bd707f6dc72be993c9085dbc5cc79ce27ebdc3cf41686d96dd908b0c537289779008249528c283156b6ff49f2062e479db885c2a5c8ec4195c3f8d7f81616cde325958d5d8b"]}, @generic="16ade7b7bfd43f139faf0d5e050e0f54d55ea8976cf2ef838331604dc1b38c2505089562f0345c3f88a6ddc3398323a5f08a6022ceb418410b1adba4c818c66c56d55332515e46ac5fd41a4fdcc16c5e6701c51024e2e25f80618becfd7a7861c037f2bc88b990bdb9c127e370371313a9b0b8b3d94fd231fac35072ef09fb51cb16f0f669f1959f83688acd3ac316d041c0a03effe29b77c10deeea175578149c9611427550331d85fc72608304b441ec7d5616f04fd188eb47551cdb54eec0b3ad1aa08a815a580946c905ea3c82548eebfd36599fdd52ed609f1b901b7a0c7f"]}, 0x1290}, {&(0x7f00000031c0)={0x24, 0x1e, 0x405, 0x70bd2a, 0x25dfdbfc, "", [@nested={0xc, 0x56, [@typed={0x8, 0x17, @fd=r0}]}, @typed={0x8, 0x77, @fd=r0}]}, 0x24}, {&(0x7f0000003340)={0x18, 0x13, 0x416, 0x70bd25, 0x25dfdbfc, "", [@typed={0x8, 0x76, @uid=r5}]}, 0x18}, {&(0x7f0000003380)={0x24, 0x30, 0x400, 0x70bd2d, 0x25dfdbfd, "", [@generic, @typed={0x14, 0x28, @binary="80c6b5be2335fa69fa40c37e7c634425"}]}, 0x24}, {&(0x7f00000033c0)={0x27c, 0x1d, 0x200, 0x70bd2b, 0x25dfdbfe, "", [@typed={0x14, 0x22, @binary="ff55f681c6ab4ce8e93d1fd7aa5bb2"}, @typed={0x4, 0x36}, @generic="5597bf8a12087a301096a54669e380fbfd3539db212240549de337f3a7b494c5dacdc35f244eadcd29481d28f1d02d3a0c767db9b584f84a4b5f390bd181280be9a0cc806b503de5c7b33c73736e9ae10ea5ce3df0859be4f80ecbccb4cda333604a58cd569c323b9754da0823be0f88a4e432eec70adcefd6f7", @nested={0xd0, 0x72, [@typed={0x8, 0x4, @fd=r0}, @generic="b1df9c9665962e98bb368b322994054e216e208dc3a39bc854782b39213eee8bc3b63b2438f4d8988c2115f8892dbb598770dd517d940126bfe6f29c5c114a5780670afe31ab938b235697bd807d943c565a62e4a3d4e727178e23bff1a08015e23050bad1399a56e33a0835c7a1c4a45379fcd74f2a7e103bfaeb04acb955795a02d315691a28eb1e5b057a923d73866df8a61fb3b420e8ec359331ebdbca1c94e7109602ea059d0be9a57d47da97f7d711becbc14f359bbc5f5f6d2642423fa9d258"]}, @generic='W', @generic, @nested={0x98, 0x32, [@typed={0x8, 0x1e, @ipv4=@empty}, @typed={0xc, 0x33, @str='vmnet1[\x00'}, @typed={0x4, 0x95}, @generic="d005703d9a4bbbd0c43827aa1e74c992487447ca7a421808308baf5f20f9765219be33cfe81318b16b29c36b29d7073d5fd3700a18b390e8d3668ad9617cfac0ca9933f67daa7d019e9a7cbc2bfc2d2dd3a670e46c536a16daa5104de9c9d19b42c2d53d404346e905ba62c64f3fdfc84bf545ec8e9fca51ff4f"]}, @generic="039ec2e18822d0dc41fcb57d069bd691ed2a22565c04f7a892ab7ac51cc2a3e9c6851404102f90759796a3b79b62fa6e80d9b2ebc9728b68d7414fd2efda2ac04fd9f998717046d61b0f0d745f45ff6cdac2bd01cd51b14d88c173a69d379b00eec4137b2411431ec5e23724bd608f79"]}, 0x27c}], 0x8, &(0x7f00000038c0)=[@cred={0x20, 0x1, 0x2, r6, r7, r8}], 0x20, 0x40040}, 0x40000)

[ 1605.199065] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1605.216243] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1605.318020] binder: 29623:29624 got transaction with invalid data ptr
[ 1605.336833] binder_transaction: 7 callbacks suppressed
[ 1605.336852] binder: 29623:29624 transaction failed 29201/-14, size 8192-0 line 3053
[ 1605.336942] Sensor A: =================  START STATUS  =================
09:26:10 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1605.361570] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:26:10 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x40, @tick=0x5758, 0x200, {0x7fffffff, 0xfffffffffffffffb}, 0x5, 0x3, 0x5})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

09:26:10 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:10 executing program 0:
clone(0x300000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

[ 1605.425620] Sensor A: Test Pattern: 75% Colorbar
[ 1605.445299] Sensor A: Vertical Flip: false
09:26:10 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000000120020"], 0x0, 0x0, 0x0})

[ 1605.479565] Sensor A: Horizontal Flip: false
[ 1605.488156] binder_release_work: 7 callbacks suppressed
[ 1605.488163] binder: undelivered TRANSACTION_ERROR: 29201
[ 1605.514554] Sensor A: Brightness: 128
[ 1605.533103] Sensor A: Contrast: 128
[ 1605.566071] Sensor A: Hue: 0
09:26:10 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000100)={0x0, @dev, @remote}, &(0x7f0000000140)=0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x81, 0x4, 0xa000}, 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

09:26:10 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1605.586370] Sensor A: Saturation: 128
[ 1605.594072] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1605.619320] binder: 29658:29659 got transaction with invalid data ptr
[ 1605.624624] Sensor A: ==================  END STATUS  ==================
09:26:10 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1605.673191] binder: 29658:29659 transaction failed 29201/-14, size 8192-0 line 3053
[ 1605.679676] Sensor A: =================  START STATUS  =================
[ 1605.728501] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1605.744134] Sensor A: Test Pattern: 75% Colorbar
09:26:10 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000040)='\x00', 0x2)
write$binfmt_elf32(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff00000000200001000000010400000000000003000000000000000000000000120000030000000000000000000000000000005c360b4e2cb5f5b073d115ceea76bf9f026bc23de425f8d06999e7ba62a61ce1abe79e384f014f93db1a245ef6fd95f66577951d341909e3b4520c75c55b6507aedda1c319c434a1af670a7565d2a7fabafbf3505f76aa9f5b749958f8188aa01bd21beabc306260ef18e415365b23320587dc2698abd5bc0271382e9479c699286c4f0eb98862108b102cbbbd9ae7ff4ad226c0bcc7ae1adbc395ba87ec1d"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

[ 1605.769163] Sensor A: Vertical Flip: false
[ 1605.782357] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1605.795842] Sensor A: Horizontal Flip: false
[ 1605.810080] Sensor A: Brightness: 128
[ 1605.823675] Sensor A: Contrast: 128
[ 1605.834103] device bridge_slave_1 left promiscuous mode
[ 1605.834657] Sensor A: Hue: 0
[ 1605.839642] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1605.860485] binder: undelivered TRANSACTION_ERROR: 29201
[ 1605.910594] Sensor A: Saturation: 128
[ 1605.926628] Sensor A: ==================  END STATUS  ==================
09:26:10 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1009800]})

09:26:10 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00 '], 0x0, 0x0, 0x0})

09:26:10 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x2)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x10000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20\x00', 0x408000, 0x0)
ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f0000000200)={0x281, 0x1})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write$USERIO_CMD_REGISTER(r3, &(0x7f00000001c0)={0x0, 0x4}, 0x2)
r4 = dup2(r1, r0)
r5 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x202800)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0xfffffffffffffffe, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x800})
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', r4}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5)

09:26:10 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:10 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x58)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x22000, 0x0)
execveat(r1, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

09:26:10 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1605.953802] device bridge_slave_0 left promiscuous mode
[ 1605.959301] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1606.058200] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1606.084642] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:26:11 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:11 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x1004000000016)

09:26:11 executing program 0:
clone(0x2000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000080)={0x0, <r1=>0x0}, &(0x7f00000000c0)=0xc)
fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
lchown(&(0x7f0000000040)='./file0\x00', r1, r2)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

[ 1606.122135] binder: 29704:29715 got transaction with invalid data ptr
[ 1606.160766] Sensor A: =================  START STATUS  =================
[ 1606.199399] Sensor A: Test Pattern: 75% Colorbar
[ 1606.204513] binder: 29704:29715 transaction failed 29201/-14, size 8192-0 line 3053
[ 1606.216847] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:26:11 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1606.251136] Sensor A: Vertical Flip: false
[ 1606.283864] Sensor A: Horizontal Flip: false
[ 1606.306828] Sensor A: Brightness: 128
[ 1606.322748] Sensor A: Contrast: 128
[ 1606.343588] Sensor A: Hue: 0
[ 1606.349072] Sensor A: Saturation: 128
09:26:11 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x3f00000000000000, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:11 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xffff, 0x2)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

[ 1606.361227] Sensor A: ==================  END STATUS  ==================
[ 1606.364852] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1606.395511] device hsr_slave_1 left promiscuous mode
[ 1606.471508] device hsr_slave_0 left promiscuous mode
[ 1606.485033] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1606.559726] team0 (unregistering): Port device team_slave_1 removed
[ 1606.608894] team0 (unregistering): Port device team_slave_0 removed
[ 1606.640115] bond0 (unregistering): Releasing backup interface bond_slave_1
[ 1606.692781] bond0 (unregistering): Releasing backup interface bond_slave_0
[ 1606.779951] bond0 (unregistering): Released all slaves
[ 1606.852486] binder: BINDER_SET_CONTEXT_MGR already set
[ 1606.852582] binder_alloc: 29704: binder_alloc_buf, no vma
[ 1606.860454] binder: 29704:29758 ioctl 40046207 0 returned -16
[ 1606.863977] binder: 29704:29759 transaction failed 29189/-3, size 8192-0 line 3035
[ 1606.877864] binder: undelivered TRANSACTION_ERROR: 29201
[ 1606.884640] binder: undelivered TRANSACTION_ERROR: 29189
[ 1606.910129] Sensor A: =================  START STATUS  =================
[ 1606.937668] Sensor A: Test Pattern: 75% Colorbar
[ 1606.948850] Sensor A: Vertical Flip: false
[ 1606.982634] Sensor A: Horizontal Flip: false
[ 1606.991183] Sensor A: Brightness: 128
[ 1607.007957] Sensor A: Contrast: 128
[ 1607.024794] Sensor A: Hue: 0
[ 1607.027930] Sensor A: Saturation: 128
09:26:11 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100f000]})

09:26:11 executing program 0:
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x80, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x0, 0x70bd27, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4000)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

[ 1607.044492] Sensor A: ==================  END STATUS  ==================
09:26:12 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00000000c0)={0x8, 0x2, {0x0, 0x2, 0x7b72, 0x3}})
poll(&(0x7f0000000140)=[{r3, 0x8000}], 0x1, 0x0)
r4 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)
prctl$PR_SET_TIMERSLACK(0x1d, 0xa6)

09:26:12 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:12 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00 '], 0x0, 0x0, 0x0})

[ 1607.130437] Sensor A: =================  START STATUS  =================
[ 1607.144725] Sensor A: Test Pattern: 75% Colorbar
[ 1607.151453] Sensor A: Vertical Flip: false
[ 1607.160295] Sensor A: Horizontal Flip: false
[ 1607.171909] Sensor A: Brightness: 128
[ 1607.189066] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1607.201857] Sensor A: Contrast: 128
[ 1607.211518] Sensor A: Hue: 0
[ 1607.219469] Sensor A: Saturation: 128
[ 1607.227901] binder: 29775:29776 got transaction with invalid data ptr
09:26:12 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:12 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000080)='\x01\x00\x00%\t\xc3\x90\xab\x0e3\x02\xfbR\xb6\xd9\x87@Q+MV\xe4\xb6\x11\xf1\xe9\xa1\x9a/\xd1w\"\xc8F\x1fmSt\f_\x19V\xd8\x9dV,\xaf\x03\xa10\xaf\x9a\xd0\b\xa5}4MEV\x94\x9d\xa5C\xef\xc2\xde\x1e[\f\xef\x8aw\xb5\xb3\x9dOw\x9d\xd5\xb4\xe5\xa5k\xac\xc2\xe5H\x01\x83\xef\xea\xca\xfa5o\xbcA\xe9~lIZ\x03\xd0\x84\x8d\x7f\x83\xd7\x9e\x03\x14,\xe3WH\xfaW', 0x0)
write$binfmt_elf32(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c460000000000000000000000030003006f340000000000003800000000000000e8ff0000000020000100000001ff000000ea000003000000000036d133218b0835d6f0524923b08098a514fd40000000000000001200000300000000000000000000"], 0x58)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x101000, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000240)=[0x80, 0xc000000, 0x401, 0x100, 0x0, 0x101, 0xfffffffffffffea2, 0x5, 0x40], 0x9, 0x0, 0x400, 0x3, 0x5055, 0x1f, {0x1, 0x2, 0x8, 0xd2, 0xffffffff, 0x2, 0x30, 0x1ff, 0xffd, 0x4, 0x1, 0x1d32, 0x0, 0x6, "132780e8993a6ca9521e040215b29a2efaaa0bd045eb04db814a5fc2dc601644"}})
openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x20000, 0x0)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x200200, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x400000, 0x0)
openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x1a000, 0x0)
syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x88b, 0x400)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

[ 1607.234034] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1607.252807] Sensor A: ==================  END STATUS  ==================
[ 1607.259608] binder: 29775:29776 transaction failed 29201/-14, size 8192-0 line 3053
[ 1607.377645] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1607.411747] binder: undelivered TRANSACTION_ERROR: 29201
[ 1607.445387] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:26:14 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1099800]})

09:26:14 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x1004000000016)

09:26:14 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0xd01)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

09:26:14 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00 '], 0x0, 0x0, 0x0})

09:26:14 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0xfeffff0700000000, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:14 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200000, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x12040010}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x3b0, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x42800000000000}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}]}, @TIPC_NLA_MEDIA={0x78, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffffff80}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x4, @remote, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4, @empty, 0x9}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x61ab947c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa1}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x7c, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc940}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe3}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_BEARER={0x7c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_LINK={0xf8, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6b2}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}]}, 0x3b0}, 0x1, 0x0, 0x0, 0x80}, 0x2004c890)

09:26:14 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='\x00', 0xffffffffffffff9c}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000300)={{{@in6, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
dup3(r0, r0, 0x80000)
r2 = open(&(0x7f0000000c40)='./file0\x00', 0x0, 0x25)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000c80)={{{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000c00)=0x41b)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}}}, &(0x7f0000000280)=0xe8)
r5 = getuid()
stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
r7 = geteuid()
getgroups(0x4, &(0x7f00000006c0)=[<r8=>0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xee01])
fstat(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
r10 = getegid()
stat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0})
r12 = getegid()
stat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0})
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000900)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000940)=0xc)
r15 = getegid()
r16 = getegid()
stat(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r17=>0x0})
fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000a40)={{}, {}, [{0x2, 0x1, r1}, {0x2, 0x4, r3}, {0x2, 0x6, r4}, {0x2, 0x1, r5}, {0x2, 0x1, r6}, {0x2, 0x2, r7}], {0x4, 0x2}, [{0x8, 0x1, r8}, {0x8, 0x0, r9}, {0x8, 0x1, r10}, {0x8, 0x4, r11}, {0x8, 0x4, r12}, {0x8, 0x1, r13}, {0x8, 0x6, r14}, {0x8, 0x6, r15}, {0x8, 0x1, r16}, {0x8, 0x4, r17}], {0x10, 0x4}, {0x20, 0x4}}, 0xa4, 0x1)
r18 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r18, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f3600000000000038000000000000d700e8ff000000002000010000000104000000000000030000000000200000000000001200000000000000000000000000000000002970c207cdca97c1c7f1b421aac16f1101379d"], 0x58)
execveat(r18, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)
syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x0, 0x141)
syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x800, 0x10000)

[ 1609.320809] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1609.329757] Sensor A: =================  START STATUS  =================
[ 1609.350049] binder: 29807:29821 got transaction with invalid data ptr
[ 1609.374974] Sensor A: Test Pattern: 75% Colorbar
[ 1609.376525] binder: 29807:29821 transaction failed 29201/-14, size 8192-0 line 3053
[ 1609.390094] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1609.397297] Sensor A: Vertical Flip: false
[ 1609.422252] Sensor A: Horizontal Flip: false
[ 1609.440847] Sensor A: Brightness: 128
[ 1609.450690] Sensor A: Contrast: 128
[ 1609.468842] Sensor A: Hue: 0
09:26:14 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0xff00000000000000, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1609.486362] Sensor A: Saturation: 128
09:26:14 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00 '], 0x0, 0x0, 0x0})

[ 1609.511973] Sensor A: ==================  END STATUS  ==================
[ 1609.533384] binder: undelivered TRANSACTION_ERROR: 29201
09:26:14 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f00000002c0)='\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

[ 1609.565041] Sensor A: =================  START STATUS  =================
[ 1609.583684] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1609.602911] Sensor A: Test Pattern: 75% Colorbar
[ 1609.609320] binder: 29844:29845 got transaction with invalid data ptr
[ 1609.616490] Sensor A: Vertical Flip: false
[ 1609.630249] Sensor A: Horizontal Flip: false
[ 1609.635320] binder: 29844:29845 transaction failed 29201/-14, size 8192-0 line 3053
[ 1609.650720] Sensor A: Brightness: 128
[ 1609.657382] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:26:14 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x00 '], 0x0, 0x0, 0x0})

[ 1609.672702] Sensor A: Contrast: 128
[ 1609.676398] Sensor A: Hue: 0
[ 1609.679426] Sensor A: Saturation: 128
[ 1609.695390] binder: undelivered TRANSACTION_ERROR: 29201
[ 1609.719798] Sensor A: ==================  END STATUS  ==================
09:26:14 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:14 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]})

[ 1609.808531] binder: 29854:29855 got transaction with invalid data ptr
[ 1609.823071] binder: 29854:29855 transaction failed 29201/-14, size 8192-0 line 3053
[ 1609.854507] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1609.885672] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1609.911814] binder: undelivered TRANSACTION_ERROR: 29201
[ 1609.927602] Sensor A: =================  START STATUS  =================
[ 1609.940068] Sensor A: Test Pattern: 75% Colorbar
[ 1609.984266] Sensor A: Vertical Flip: false
[ 1609.988581] Sensor A: Horizontal Flip: false
[ 1609.999852] Sensor A: Brightness: 128
[ 1610.004091] Sensor A: Contrast: 128
[ 1610.007760] Sensor A: Hue: 0
[ 1610.010792] Sensor A: Saturation: 128
[ 1610.015290] Sensor A: ==================  END STATUS  ==================
09:26:17 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x1004000000016)

09:26:17 executing program 0:
ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f00000000c0))
r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x400)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000040))
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0xe})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000913000)={{&(0x7f00004b3000/0x5000)=nil, 0x5000}, 0x1})
clone(0x0, 0x0, 0x0, 0x0, 0x0)
sigaltstack(&(0x7f00004b3000/0x3000)=nil, 0x0)
read(r1, &(0x7f0000910000)=""/100, 0x64)

09:26:17 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x2, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:17 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00 '], 0x0, 0x0, 0x0})

09:26:17 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2099800]})

09:26:17 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x944a84db93c1664a)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r3, 0x0, 0xc9, 0x7f, &(0x7f0000000440)="f0b40e661fe2bc66bfe1f2a764721b5865c8b8bd2ee11290e9b10a605247d41b33a06cafe774a1665ed90d8c6dfb696478864744eefcb20bd374b6c7cf354cce8dbcb9dd1a38e9d1288ea68f6b9a1f9f0a36ddfc4893c0b2d3d669d6488931fb42fc33d7dd76be21d3c414b49c9bfcd200814c3e9f56f919eb7aea3f739fb91b975a53bebda277aea2d2808fdc1180bda42ff6c11d7536d16085f74b3aefaec92674a5f2166520527de0a9be7e4364afb39dbdb1026aae21ed78de766e24d082a79ef5715cc8cb0436", &(0x7f0000000100)=""/127, 0x6d}, 0x28)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r4 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

[ 1612.433110] Sensor A: =================  START STATUS  =================
[ 1612.440028] Sensor A: Test Pattern: 75% Colorbar
[ 1612.456100] binder: 29879:29881 got transaction with invalid data ptr
[ 1612.460076] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:26:17 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x3, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1612.482331] binder: 29879:29881 transaction failed 29201/-14, size 8192-0 line 3053
[ 1612.491518] Sensor A: Vertical Flip: false
[ 1612.496519] Sensor A: Horizontal Flip: false
[ 1612.503988] Sensor A: Brightness: 128
[ 1612.521720] Sensor A: Contrast: 128
09:26:17 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r4 = dup2(r1, r0)
write$UHID_INPUT2(r3, &(0x7f0000000140), 0x6)
write$selinux_attr(r4, &(0x7f00000000c0)='system_u:object_r:udev_exec_t:s0\x00', 0x21)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

09:26:17 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z\x00 '], 0x0, 0x0, 0x0})

[ 1612.552667] Sensor A: Hue: 0
[ 1612.557987] Sensor A: Saturation: 128
[ 1612.566807] Sensor A: ==================  END STATUS  ==================
[ 1612.580863] binder: undelivered TRANSACTION_ERROR: 29201
[ 1612.625745] Sensor A: =================  START STATUS  =================
[ 1612.626562] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1612.659289] Sensor A: Test Pattern: 75% Colorbar
09:26:17 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x4, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:17 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0x404c534a, &(0x7f00000002c0))

09:26:17 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400204)
r4 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x0, 0x220000)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000100)={<r5=>0x0, 0xcbc, 0x6, 0x800}, &(0x7f0000000140)=0x10)
write$P9_RWALK(r3, &(0x7f0000000340)={0x64, 0x6f, 0x1, {0x7, [{0x10, 0x1, 0x2}, {0xc, 0x40, 0x4}, {0x64}, {0x1, 0x0, 0x3}, {0x10, 0x3, 0x5}, {0x20, 0x2, 0x8}, {0x20, 0x0, 0x2}]}}, 0x64)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000001c0)={r5, 0x8001}, &(0x7f0000000200)=0x8)
r6 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x3})
write$sndseq(r4, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x800000}, {}, @connect}], 0xdcb18baf)

[ 1612.675266] binder: 29907:29909 got transaction with invalid data ptr
[ 1612.681618] Sensor A: Vertical Flip: false
[ 1612.702203] binder: 29907:29909 transaction failed 29201/-14, size 8192-0 line 3053
[ 1612.709109] Sensor A: Horizontal Flip: false
[ 1612.739305] Sensor A: Brightness: 128
[ 1612.769475] Sensor A: Contrast: 128
[ 1612.770417] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1612.789726] Sensor A: Hue: 0
[ 1612.808923] Sensor A: Saturation: 128
[ 1612.822355] Sensor A: ==================  END STATUS  ==================
[ 1612.826193] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1612.847003] binder: undelivered TRANSACTION_ERROR: 29201
09:26:20 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3099800]})

09:26:20 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000000000320"], 0x0, 0x0, 0x0})

09:26:20 executing program 4:
gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(0x0, 0x1004000000016)

09:26:20 executing program 0:
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000})
read(r0, &(0x7f0000000100)=""/67, 0x43)
flock(r0, 0x2)
mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000000002, 0x10, r1, 0x0)
flock(r0, 0x2)
flock(r0, 0x2)
msgrcv(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="003d94e51d10885e008e7a98c971d8effeac6fb9be2a64b4b7047d81bbff0d3247b97deac143e2521bff524fe03209a593216bcd2089319d10290d5b5b5d85523d180d7ca9e907771a510ae210d13e18def1b7af08884e045d0102ff7cb6c1277cebd00da5d8cc14402a70"], 0x1, 0x0, 0x0)

09:26:20 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x288000, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r4 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

09:26:20 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x5, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1615.496675] Sensor A: =================  START STATUS  =================
[ 1615.523198] binder: 29936:29938 got transaction with invalid data ptr
09:26:20 executing program 3:
accept$inet(0xffffffffffffff9c, 0x0, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0)
modify_ldt$write(0x1, 0x0, 0xffffffffffffff01)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
dup3(r0, r1, 0x0)
arch_prctl$ARCH_GET_CPUID(0x1011)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1)

09:26:20 executing program 0:
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000})
flock(r0, 0x3)
mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb)
flock(r0, 0x2)
r1 = syz_open_pts(0xffffffffffffffff, 0x0)
fcntl$lock(r1, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000})
flock(r1, 0x2000000000000003)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r2, 0x0)
flock(r1, 0x2)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="a50085f6017afe5348060000000000864d72a8d987b4026d876296918a2b35e362c633f350b31d5ade9634d4ee55f1826672d304913f017e55752e6e7d6f7bdf03098bdb8fb902c7030056e79d4611ad01b8c2b32f248fea53aad30ec00f877397e3de04f85a4949f3e4d31be4f05f02b32033f18e9ea8780bb30bff6a3cf465264993d1e52a7e5b7ff64db4e6e3f979c788f809604352d34f4b0ca0752f3e6f8077ad8579f4d7ec380e5e"], 0xab}, 0x0)

[ 1615.539341] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1615.548453] binder: 29936:29938 transaction failed 29201/-14, size 8195-0 line 3053
[ 1615.555196] Sensor A: Test Pattern: 75% Colorbar
[ 1615.572704] Sensor A: Vertical Flip: false
[ 1615.579289] Sensor A: Horizontal Flip: false
[ 1615.580294] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1615.619288] Sensor A: Brightness: 128
[ 1615.635911] Sensor A: Contrast: 128
[ 1615.649932] Sensor A: Hue: 0
09:26:20 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000000000520"], 0x0, 0x0, 0x0})

09:26:20 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x6, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1615.670212] Sensor A: Saturation: 128
[ 1615.674830] binder: undelivered TRANSACTION_ERROR: 29201
[ 1615.701018] Sensor A: ==================  END STATUS  ==================
09:26:20 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="0a04e60ced5c12655bd532f7b71522c4", 0x10)

09:26:20 executing program 3:
r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x400, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
poll(&(0x7f0000000040)=[{r0}], 0x1, 0x2)

[ 1615.764435] Sensor A: =================  START STATUS  =================
[ 1615.769200] binder: 29959:29960 got transaction with invalid data ptr
[ 1615.819942] Sensor A: Test Pattern: 75% Colorbar
[ 1615.829127] binder: 29959:29960 transaction failed 29201/-14, size 8197-0 line 3053
[ 1615.848740] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1615.849647] Sensor A: Vertical Flip: false
[ 1615.883127] Sensor A: Horizontal Flip: false
[ 1615.889489] Sensor A: Brightness: 128
[ 1615.895369] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1615.904346] binder: undelivered TRANSACTION_ERROR: 29201
[ 1615.910159] Sensor A: Contrast: 128
[ 1615.934312] Sensor A: Hue: 0
[ 1615.942348] Sensor A: Saturation: 128
[ 1615.957881] Sensor A: ==================  END STATUS  ==================
09:26:20 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14099800]})

09:26:20 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000000000620"], 0x0, 0x0, 0x0})

[ 1616.060555] binder: 29985:29986 got transaction with invalid data ptr
[ 1616.075194] binder: 29985:29986 transaction failed 29201/-14, size 8198-0 line 3053
[ 1616.086786] Sensor A: =================  START STATUS  =================
[ 1616.105232] Sensor A: Test Pattern: 75% Colorbar
[ 1616.118765] binder: undelivered TRANSACTION_ERROR: 29201
[ 1616.125022] Sensor A: Vertical Flip: false
[ 1616.140924] Sensor A: Horizontal Flip: false
[ 1616.145787] Sensor A: Brightness: 128
[ 1616.151321] Sensor A: Contrast: 128
[ 1616.169693] Sensor A: Hue: 0
[ 1616.174030] Sensor A: Saturation: 128
[ 1616.178045] Sensor A: ==================  END STATUS  ==================
[ 1616.188167] Sensor A: =================  START STATUS  =================
[ 1616.196649] Sensor A: Test Pattern: 75% Colorbar
[ 1616.201958] Sensor A: Vertical Flip: false
[ 1616.212012] Sensor A: Horizontal Flip: false
[ 1616.218336] Sensor A: Brightness: 128
[ 1616.222393] Sensor A: Contrast: 128
[ 1616.226428] Sensor A: Hue: 0
[ 1616.241418] Sensor A: Saturation: 128
[ 1616.247602] Sensor A: ==================  END STATUS  ==================
09:26:21 executing program 4:
gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(0x0, 0x1004000000016)

09:26:21 executing program 3:
write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0e00e1ac48f2f6f3200000000000a454f239e93bf0ceed402a8741e76b66db6849d5206e523848e91e36bc044936e4ce24f28e91d4e7fcdab3"], 0x1)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x220000002b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040))
ptrace$cont(0x1f, r0, 0x0, 0x0)

09:26:21 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x7, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:21 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a '], 0x0, 0x0, 0x0})

09:26:21 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="0a04e60ced5c12655bd532f7b71522c4", 0x10)

09:26:21 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15099800]})

[ 1616.460955] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1616.470495] Sensor A: =================  START STATUS  =================
[ 1616.490230] Sensor A: Test Pattern: 75% Colorbar
[ 1616.497747] binder: 30007:30011 got transaction with invalid data ptr
09:26:21 executing program 0:
accept$inet(0xffffffffffffff9c, 0x0, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0)
modify_ldt$write(0x1, 0x0, 0xffffffffffffff01)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
r2 = dup3(r0, r1, 0x0)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1)

09:26:21 executing program 3:
r0 = socket(0x40000000002, 0x3, 0x2)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68)

[ 1616.504636] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1616.511817] binder: 30007:30011 transaction failed 29201/-14, size 8199-0 line 3053
[ 1616.516496] Sensor A: Vertical Flip: false
[ 1616.561568] Sensor A: Horizontal Flip: false
09:26:21 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x60, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1616.601033] Sensor A: Brightness: 128
[ 1616.612921] Sensor A: Contrast: 128
[ 1616.619522] Sensor A: Hue: 0
[ 1616.630656] Sensor A: Saturation: 128
09:26:21 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n '], 0x0, 0x0, 0x0})

09:26:21 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000))

[ 1616.646389] Sensor A: ==================  END STATUS  ==================
[ 1616.663511] binder: undelivered TRANSACTION_ERROR: 29201
[ 1616.668270] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1616.693173] Sensor A: =================  START STATUS  =================
09:26:21 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x1000000000004)
writev(r0, &(0x7f00000a8000)=[{&(0x7f00000000c0)="580000001400192300bb4b80040d8c56286932324ba7e680129643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004000000005e0000001d30221f1000010007008a96ff0000ec6b0f536e", 0x58}], 0x1)

[ 1616.711602] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1616.735139] Sensor A: Test Pattern: 75% Colorbar
[ 1616.765800] Sensor A: Vertical Flip: false
[ 1616.770210] Sensor A: Horizontal Flip: false
[ 1616.775819] binder: 30038:30039 got transaction with invalid data ptr
[ 1616.796872] Sensor A: Brightness: 128
[ 1616.810309] Sensor A: Contrast: 128
[ 1616.813281] binder: 30038:30039 transaction failed 29201/-14, size 8202-0 line 3053
[ 1616.819163] Sensor A: Hue: 0
[ 1616.840526] Sensor A: Saturation: 128
[ 1616.860290] Sensor A: ==================  END STATUS  ==================
[ 1616.921518] binder: undelivered TRANSACTION_ERROR: 29201
09:26:22 executing program 4:
gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(0x0, 0x1004000000016)

09:26:22 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x300, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:22 executing program 0:
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000})
flock(r0, 0x3)
mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb)
flock(r0, 0x2)
r1 = syz_open_pts(0xffffffffffffffff, 0x0)
fcntl$lock(r1, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000})
flock(r1, 0x2000000000000003)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r2, 0x0)
flock(r1, 0x2)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x141}, 0x0)

09:26:22 executing program 3:
write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0e53d6961400be12b27396db1500227754b0905765ca000000caa5def0d44c3b0000008de0ab599d16fc81706580399f54f2f63fb847e9c34e"], 0x1)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x220000002b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040))
ptrace$cont(0x1f, r0, 0x0, 0x0)

09:26:22 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000000001220"], 0x0, 0x0, 0x0})

09:26:22 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ffffff]})

[ 1617.332079] ptrace attach of "/root/syz-executor3"[30052] was attempted by "/root/syz-executor3"[30053]
[ 1617.353938] Sensor A: =================  START STATUS  =================
[ 1617.357760] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1617.360874] Sensor A: Test Pattern: 75% Colorbar
[ 1617.360895] Sensor A: Vertical Flip: false
09:26:22 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001240)="2e0000002800813ee45ae087185082cf0300b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0)

09:26:22 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)

[ 1617.391538] binder: 30057:30061 got transaction with invalid data ptr
[ 1617.396758] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1617.422880] Sensor A: Horizontal Flip: false
[ 1617.428647] Sensor A: Brightness: 128
09:26:22 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x500, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1617.440570] binder: 30057:30061 transaction failed 29201/-14, size 8210-0 line 3053
[ 1617.459205] Sensor A: Contrast: 128
[ 1617.487865] netlink: 26 bytes leftover after parsing attributes in process `syz-executor0'.
[ 1617.487892] Sensor A: Hue: 0
[ 1617.487908] Sensor A: Saturation: 128
[ 1617.487943] Sensor A: ==================  END STATUS  ==================
[ 1617.510292] binder: release 30074:30075 transaction 3752 out, still active
[ 1617.526763] Sensor A: =================  START STATUS  =================
09:26:22 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00  '], 0x0, 0x0, 0x0})

09:26:22 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x600, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1617.540205] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1617.544037] binder: send failed reply for transaction 3752, target dead
[ 1617.551270] binder: undelivered TRANSACTION_COMPLETE
[ 1617.565162] binder: undelivered TRANSACTION_ERROR: 29201
[ 1617.569644] Sensor A: Test Pattern: 75% Colorbar
[ 1617.581827] binder: 30074:30075 transaction failed 29189/-22, size 0-0 line 2896
[ 1617.603417] Sensor A: Vertical Flip: false
[ 1617.616746] binder: undelivered TRANSACTION_ERROR: 29189
[ 1617.625775] Sensor A: Horizontal Flip: false
[ 1617.643885] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:26:22 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c122b3188a070")
epoll_pwait(0xffffffffffffffff, &(0x7f00000003c0)=[{}], 0x1, 0x0, 0x0, 0x0)

[ 1617.647622] Sensor A: Brightness: 128
[ 1617.670893] Sensor A: Contrast: 128
[ 1617.682015] Sensor A: Hue: 0
[ 1617.685796] Sensor A: Saturation: 128
[ 1617.695762] binder: 30088:30089 got transaction with invalid data ptr
[ 1617.702429] binder: 30088:30089 transaction failed 29201/-14, size 8224-0 line 3053
[ 1617.711452] Sensor A: ==================  END STATUS  ==================
[ 1617.796299] binder: undelivered TRANSACTION_ERROR: 29201
09:26:23 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x0)

09:26:23 executing program 3:
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000})
flock(r0, 0x2)
mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb)
flock(r0, 0x2)
r1 = syz_open_pts(0xffffffffffffffff, 0x0)
fcntl$lock(r1, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000002})
flock(r1, 0x2000000000000003)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r2, 0x0)
flock(r1, 0x2)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="a539578e0be2ae085e3e46"], 0xb}, 0x0)

09:26:23 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x700, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:23 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H '], 0x0, 0x0, 0x0})

09:26:23 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]})

09:26:23 executing program 0:

09:26:23 executing program 0:

[ 1618.317848] binder: 30103:30104 got transaction with invalid data ptr
[ 1618.335976] binder: 30103:30104 transaction failed 29201/-14, size 8264-0 line 3053
[ 1618.344467] Sensor A: =================  START STATUS  =================
[ 1618.352915] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:26:23 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L '], 0x0, 0x0, 0x0})

[ 1618.402874] Sensor A: Test Pattern: 75% Colorbar
[ 1618.430588] Sensor A: Vertical Flip: false
09:26:23 executing program 3:

09:26:23 executing program 0:

[ 1618.455216] binder: undelivered TRANSACTION_ERROR: 29201
[ 1618.456114] Sensor A: Horizontal Flip: false
09:26:23 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x2000, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1618.513652] binder: 30120:30122 got transaction with invalid data ptr
[ 1618.535109] Sensor A: Brightness: 128
09:26:23 executing program 3:

[ 1618.557142] binder: 30120:30122 transaction failed 29201/-14, size 8268-0 line 3053
[ 1618.567687] Sensor A: Contrast: 128
[ 1618.584206] Sensor A: Hue: 0
[ 1618.595744] Sensor A: Saturation: 128
[ 1618.609357] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1618.636111] Sensor A: ==================  END STATUS  ==================
[ 1618.665377] binder: undelivered TRANSACTION_ERROR: 29201
[ 1618.671632] Sensor A: =================  START STATUS  =================
[ 1618.709795] Sensor A: Test Pattern: 75% Colorbar
[ 1618.727145] Sensor A: Vertical Flip: false
[ 1618.731769] Sensor A: Horizontal Flip: false
[ 1618.740857] Sensor A: Brightness: 128
[ 1618.753974] Sensor A: Contrast: 128
[ 1618.757799] Sensor A: Hue: 0
[ 1618.760963] Sensor A: Saturation: 128
[ 1618.767597] Sensor A: ==================  END STATUS  ==================
09:26:24 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x0)

09:26:24 executing program 0:

09:26:24 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00` '], 0x0, 0x0, 0x0})

09:26:24 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x3f00, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:24 executing program 3:

09:26:24 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]})

[ 1619.204296] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1619.213488] Sensor A: =================  START STATUS  =================
[ 1619.234631] binder: 30140:30146 got transaction with invalid data ptr
[ 1619.238301] Sensor A: Test Pattern: 75% Colorbar
[ 1619.241342] binder: 30140:30146 transaction failed 29201/-14, size 8288-0 line 3053
09:26:24 executing program 3:

09:26:24 executing program 0:

[ 1619.258626] Sensor A: Vertical Flip: false
09:26:24 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x4000, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1619.292712] Sensor A: Horizontal Flip: false
[ 1619.312123] Sensor A: Brightness: 128
09:26:24 executing program 3:

[ 1619.359095] Sensor A: Contrast: 128
09:26:24 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h '], 0x0, 0x0, 0x0})

09:26:24 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x7a})

[ 1619.404296] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1619.413015] Sensor A: Hue: 0
[ 1619.426220] binder: undelivered TRANSACTION_ERROR: 29201
[ 1619.456727] Sensor A: Saturation: 128
[ 1619.492807] Sensor A: ==================  END STATUS  ==================
[ 1619.522884] binder: 30168:30170 got transaction with invalid data ptr
[ 1619.571262] binder: 30168:30170 transaction failed 29201/-14, size 8296-0 line 3053
[ 1619.661904] binder: undelivered TRANSACTION_ERROR: 29201
09:26:24 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x0)

09:26:24 executing program 3:
syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0)

09:26:24 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x6000, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:24 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe7]})

09:26:24 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]})

09:26:24 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l '], 0x0, 0x0, 0x0})

[ 1620.105113] binder: 30182:30183 got transaction with invalid data ptr
[ 1620.116521] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1620.129133] Sensor A: =================  START STATUS  =================
[ 1620.137186] binder: 30182:30183 transaction failed 29201/-14, size 8300-0 line 3053
[ 1620.158512] Sensor A: Test Pattern: 75% Colorbar
09:26:25 executing program 3:
semop(0x0, &(0x7f0000000100)=[{0x0, 0xffffffffffffffe0}, {}], 0x2)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
semop(0x0, &(0x7f0000000040)=[{0x3, 0x1}, {0x6, 0x7, 0x800}, {}], 0x3)

[ 1620.197262] Sensor A: Vertical Flip: false
09:26:25 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t '], 0x0, 0x0, 0x0})

09:26:25 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0xff00, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1620.234589] Sensor A: Horizontal Flip: false
[ 1620.242111] binder: undelivered TRANSACTION_ERROR: 29201
09:26:25 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952})
ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x03Z\x00\x02\xe6\x03\xca\x00', @ifru_mtu=0x1})

[ 1620.286204] Sensor A: Brightness: 128
[ 1620.298911] Sensor A: Contrast: 128
[ 1620.315591] Sensor A: Hue: 0
[ 1620.329786] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1620.332018] binder: 30202:30203 got transaction with invalid data ptr
[ 1620.345716] Sensor A: Saturation: 128
[ 1620.353052] binder: 30202:30203 transaction failed 29201/-14, size 8308-0 line 3053
[ 1620.361214] Sensor A: ==================  END STATUS  ==================
09:26:25 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x1000000, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1620.397991] Sensor A: =================  START STATUS  =================
[ 1620.418097] Sensor A: Test Pattern: 75% Colorbar
[ 1620.430327] Sensor A: Vertical Flip: false
[ 1620.435247] Sensor A: Horizontal Flip: false
[ 1620.441274] Sensor A: Brightness: 128
[ 1620.454828] Sensor A: Contrast: 128
[ 1620.469820] Sensor A: Hue: 0
[ 1620.474017] Sensor A: Saturation: 128
[ 1620.479117] Sensor A: ==================  END STATUS  ==================
[ 1620.480233] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:26:25 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z '], 0x0, 0x0, 0x0})

[ 1620.509244] binder: undelivered TRANSACTION_ERROR: 29201
[ 1620.628775] binder: 30222:30223 got transaction with invalid data ptr
[ 1620.640651] binder: 30222:30223 transaction failed 29201/-14, size 8314-0 line 3053
[ 1620.676339] binder: undelivered TRANSACTION_ERROR: 29201
09:26:25 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:25 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9980000000000]})

09:26:25 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000000ffff80"], 0x0, 0x0, 0x0})

09:26:25 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:25 executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1621.015693] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1621.030331] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1621.049821] binder_alloc: 30236: binder_alloc_buf size 33024 failed, no address space
[ 1621.058399] Sensor A: =================  START STATUS  =================
09:26:26 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x3000000, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1621.066348] Sensor A: Test Pattern: 75% Colorbar
[ 1621.075373] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1621.084778] Sensor A: Vertical Flip: false
[ 1621.089120] Sensor A: Horizontal Flip: false
[ 1621.094042] binder: 30236:30237 transaction failed 29201/-28, size 33023-0 line 3035
[ 1621.102133] Sensor A: Brightness: 128
[ 1621.107185] Sensor A: Contrast: 128
[ 1621.110994] Sensor A: Hue: 0
[ 1621.133109] Sensor A: Saturation: 128
[ 1621.137274] Sensor A: ==================  END STATUS  ==================
[ 1621.182827] Sensor A: =================  START STATUS  =================
[ 1621.192188] binder: undelivered TRANSACTION_ERROR: 29201
09:26:26 executing program 3 (fault-call:5 fault-nth:0):
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:26:26 executing program 0:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:26:26 executing program 4:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$alg(0x26, 0x5, 0x0)
ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pipe2(0x0, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x4, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}})
ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000000)=0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r4, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0xffffffffffffff07}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x2004c000)
r5 = dup2(r1, r0)
ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x2)
socket(0x11, 0x3, 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

09:26:26 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[ 1621.229569] Sensor A: Test Pattern: 75% Colorbar
[ 1621.258023] Sensor A: Vertical Flip: false
[ 1621.288050] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1621.296738] Sensor A: Horizontal Flip: false
[ 1621.322736] Sensor A: Brightness: 128
[ 1621.334705] FAULT_INJECTION: forcing a failure.
[ 1621.334705] name failslab, interval 1, probability 0, space 0, times 0
[ 1621.341248] Sensor A: Contrast: 128
[ 1621.366913] Sensor A: Hue: 0
[ 1621.371068] CPU: 0 PID: 30263 Comm: syz-executor3 Not tainted 4.20.0+ #10
[ 1621.373364] binder: send failed reply for transaction 3773 to 30254:30255
[ 1621.378021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1621.378034] Call Trace:
[ 1621.378066]  dump_stack+0x1db/0x2d0
[ 1621.378092]  ? dump_stack_print_info.cold+0x20/0x20
[ 1621.396735] Sensor A: Saturation: 128
[ 1621.396959]  should_fail.cold+0xa/0x15
[ 1621.413243]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1621.418370]  ? ___might_sleep+0x1e7/0x310
[ 1621.419867] Sensor A: ==================  END STATUS  ==================
[ 1621.422529]  ? arch_local_save_flags+0x50/0x50
[ 1621.422546]  ? print_usage_bug+0xd0/0xd0
[ 1621.422559]  ? perf_trace_lock+0x750/0x750
[ 1621.422586]  __should_failslab+0x121/0x190
[ 1621.422605]  should_failslab+0x9/0x14
[ 1621.450326]  kmem_cache_alloc_trace+0x2d1/0x760
[ 1621.455011]  ? __local_bh_enable_ip+0x15a/0x270
[ 1621.459686]  ? __local_bh_enable_ip+0x15a/0x270
[ 1621.464378]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 1621.468992]  virtio_transport_alloc_pkt+0xc8/0xaa0
[ 1621.473953]  ? trace_hardirqs_off_caller+0x300/0x300
[ 1621.479084]  ? do_raw_spin_unlock+0xa0/0x330
[ 1621.483505]  ? check_preemption_disabled+0x48/0x290
[ 1621.488552]  ? virtio_transport_do_socket_init+0x570/0x570
[ 1621.494190]  ? __local_bh_enable_ip+0x15a/0x270
[ 1621.498871]  ? _raw_spin_unlock_bh+0x31/0x40
[ 1621.503294]  virtio_transport_send_pkt_info+0x1fa/0x450
[ 1621.508670]  virtio_transport_connect+0x18d/0x200
[ 1621.513522]  ? virtio_transport_send_pkt_info+0x450/0x450
[ 1621.519083]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1621.524653]  ? virtio_transport_stream_is_active+0x10/0x10
[ 1621.530282]  vsock_stream_connect+0x4dc/0xe70
[ 1621.534799]  ? vsock_dgram_connect+0x4f0/0x4f0
[ 1621.539397]  ? finish_wait+0x490/0x490
[ 1621.543309]  ? apparmor_socket_connect+0xb6/0x160
[ 1621.548159]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1621.553703]  ? security_socket_connect+0x93/0xc0
[ 1621.558498]  __sys_connect+0x357/0x490
[ 1621.562392]  ? __ia32_sys_accept+0xb0/0xb0
[ 1621.566638]  ? fput+0x128/0x1a0
[ 1621.569923]  ? do_syscall_64+0x8c/0x800
[ 1621.573899]  ? do_syscall_64+0x8c/0x800
[ 1621.577878]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 1621.582466]  ? trace_hardirqs_on+0xbd/0x310
[ 1621.586807]  ? __ia32_sys_read+0xb0/0xb0
[ 1621.590875]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1621.596247]  ? trace_hardirqs_off_caller+0x300/0x300
[ 1621.601355]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1621.606140]  __x64_sys_connect+0x73/0xb0
[ 1621.610210]  do_syscall_64+0x1a3/0x800
[ 1621.614106]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 1621.619045]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 1621.624086]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1621.628946]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1621.634140] RIP: 0033:0x457ec9
[ 1621.637338] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1621.656248] RSP: 002b:00007fc69045cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 1621.663963] RAX: ffffffffffffffda RBX: 00007fc69045cc90 RCX: 0000000000457ec9
[ 1621.671247] RDX: 0000000000000010 RSI: 0000000020000200 RDI: 0000000000000004
[ 1621.678535] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
09:26:26 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

09:26:26 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00\x9dt\x98\x16>\x99\x03\xae#(^+\x87\xb29\xde\xcdu/\v*\x0e\xbf\xb2\xd0\x197\f\x94S\xc4\xe1\x8a\xc5\x13\x0e\x8b\x05\xc3#\a\x7fQ<b\x19\x98\xef\xab\r\nv\xcb<+\a*1x\x8e[\'\x1d\xf3\xc3\x1c\xb4\xb3\xb4]\xc5\xe7\x98>\x02\xbejV\x90\xf0\xfd\x0e/\x86\xc4\x81\xa4Fh\x9b\x9b\xc0\xd9\xbf*\xa3N\xa4\x1e\x00H\x1f\'gHI:\xdeqc\xcc\xcf\'\xe4U\x1ft\x14a\x0460\xaaC\x88K\xd3\x15*\xd7Q\xe4\x9e\xa6\x1b7\v9\xb3\xfe\xe8\xc2\xd9c\xd4\xba\xce|\x0e\xcf\x1d\xc2\x8c5\xea\xa3\x02\xc0\xa8\xde\x1e\xdacm\xc2i\xb6+%7f\xafT\xc5sBj\xc4\xb4\x90\xf3\xb6Vr\x91n\xeeju\a\xa3\xa2\x84\x80l\x96\x85\xc9\x99\xfb\x18\xdd\xb9\xb4\xc4\x1f|\\l1\x14\x02\xbb\x9c\x13\xa1\xdf \xda\xf8\x97/\xd3<7\x16?\xafA\x89\x0eH\xb2p\xd7\xc4\xafaMf:\xf4\x16\xe2\x9e', 0x200002, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x80000, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r3 = openat$cgroup_int(r0, &(0x7f00000000c0)='cgroup.max.descendants\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r3)
ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000140)=@req={0x28, &(0x7f0000000100)={'\x00', @ifru_data=&(0x7f0000000080)="566c4063cd2daa535de813f0b8d8f68edc0719023ef30c1291bca1d7969ddff5"}})
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
ioctl$KVM_PPC_GET_SMMU_INFO(r2, 0x8250aea6, &(0x7f00000001c0)=""/26)
write$cgroup_int(r3, &(0x7f0000000040), 0x12)

09:26:26 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x4000000, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1621.685829] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc69045d6d4
[ 1621.693099] R13: 00000000004be3f5 R14: 00000000004ce870 R15: 0000000000000005
09:26:26 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f00000000000]})

09:26:26 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c000000000000000000000000000000000000000005f5e0"], 0x0, 0x0, 0x0})

09:26:26 executing program 4:
socketpair$unix(0x1, 0x2000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
ioprio_set$pid(0x2, 0x0, 0x6e68)

09:26:26 executing program 3 (fault-call:5 fault-nth:1):
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1621.830233] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1621.863234] Sensor A: =================  START STATUS  =================
09:26:26 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x4)

[ 1621.924467] binder: BINDER_SET_CONTEXT_MGR already set
[ 1621.939744] Sensor A: Test Pattern: 75% Colorbar
[ 1621.952790] binder: 30281:30282 ioctl 40046207 0 returned -16
09:26:26 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x5000000, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1621.978763] binder_alloc: 30266: binder_alloc_buf, no vma
[ 1621.985166] Sensor A: Vertical Flip: false
[ 1622.013165] Sensor A: Horizontal Flip: false
09:26:26 executing program 4:
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x40, 0x2}, 0x10)
r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x9222, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e24, 0x4, @mcast1, 0x5}}, 0x0, 0x1, 0x0, "3eb621d47e15e7db97004d3fe8b20c235e49f5d6f3893da563eaf3482db012814a8f0f9488162a04a967b903601178233f117ec5e52d1a2152a1c29aa09369879ff44df1fe521117cf388194cb20699e"}, 0xd8)
r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2)
ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x200000, 0x0}, &(0x7f0000000580)="5f39203a1ec6", 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000003c0)={0x0, 0x5000})
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="cd"])
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000300)={<r6=>0x0, 0x4}, &(0x7f0000000340)=0x8)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000380)=r6, 0x4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0, 0x800000000000000}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r7 = getpid()
rt_tgsigqueueinfo(r7, r7, 0x16, &(0x7f0000000100))
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0)
ptrace(0x4206, r7)
ptrace(0x8, r7)
r8 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0xffffffffffff28cb, 0x2200)
sendfile(r0, r8, &(0x7f0000000180)=0x32, 0x8001)
syz_open_dev$vcsn(0x0, 0x2, 0x511040)

[ 1622.039395] Sensor A: Brightness: 128
09:26:27 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'], 0x0, 0x0, 0x0})

09:26:27 executing program 0:
r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
modify_ldt$write(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00')
ptrace$getregset(0x4204, 0x0, 0x3, &(0x7f00000001c0)={&(0x7f00000002c0)=""/126, 0xb2})
writev(r1, &(0x7f0000000080), 0x1a6)
prctl$PR_GET_FPEMU(0x9, &(0x7f0000000040))
epoll_create(0x2)

[ 1622.065824] Sensor A: Contrast: 128
[ 1622.084283] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1622.085568] Sensor A: Hue: 0
[ 1622.149403] Sensor A: Saturation: 128
[ 1622.160819] Sensor A: ==================  END STATUS  ==================
[ 1622.164179] binder: BINDER_SET_CONTEXT_MGR already set
[ 1622.188613] binder: 30303:30306 ioctl 40046207 0 returned -16
09:26:27 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x6000000, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1622.210713] binder_alloc: 30266: binder_alloc_buf, no vma
09:26:27 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00c\x00'], 0x0, 0x0, 0x0})

09:26:27 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]})

[ 1622.347509] binder: BINDER_SET_CONTEXT_MGR already set
[ 1622.361142] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1622.390465] binder: 30320:30321 ioctl 40046207 0 returned -16
[ 1622.414088] binder_alloc: 30266: binder_alloc_buf, no vma
09:26:27 executing program 0:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
flock(r0, 0x40000000001)
flock(r1, 0x2)
flock(r1, 0x100000000000001)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000000)={0x1, "7f4cc61cf720181810a202586be8fe2ab66a3c8356abc2841ec8a73d0a5e520d", 0x3, 0x3, 0x8, 0x0, 0xa})
flock(r0, 0x2)

[ 1622.442685] Sensor A: =================  START STATUS  =================
09:26:27 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x7000000, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:27 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x0, 0x0, 0x0})

[ 1622.489656] Sensor A: Test Pattern: 75% Colorbar
[ 1622.498346] binder: send failed reply for transaction 3775 to 30266:30267
09:26:27 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1622.541289] binder: undelivered TRANSACTION_COMPLETE
[ 1622.560813] Sensor A: Vertical Flip: false
[ 1622.568822] binder: 30335:30337 got transaction with invalid data ptr
[ 1622.580489] binder: undelivered TRANSACTION_COMPLETE
[ 1622.591308] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1622.597402] binder_transaction: 3 callbacks suppressed
[ 1622.597421] binder: 30335:30337 transaction failed 29201/-14, size 2560-0 line 3053
[ 1622.607859] Sensor A: Horizontal Flip: false
[ 1622.631708] Sensor A: Brightness: 128
09:26:27 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x7fffffe, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1622.645375] Sensor A: Contrast: 128
[ 1622.656017] Sensor A: Hue: 0
[ 1622.664680] Sensor A: Saturation: 128
[ 1622.677523] Sensor A: ==================  END STATUS  ==================
[ 1622.711477] Sensor A: =================  START STATUS  =================
09:26:27 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x20000000, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1622.775145] Sensor A: Test Pattern: 75% Colorbar
[ 1622.784457] binder_release_work: 5 callbacks suppressed
[ 1622.784465] binder: undelivered TRANSACTION_ERROR: 29201
[ 1622.832756] Sensor A: Vertical Flip: false
[ 1622.850806] Sensor A: Horizontal Flip: false
09:26:27 executing program 4:
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x800)
getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000280), &(0x7f00000002c0)=0xc)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r3=>0xffffffffffffffff}, 0x106, 0xf}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000140)={0x9, 0x108, 0xfa00, {r3, 0xed, "0eb605", "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"}}, 0x110)
bind$alg(r0, 0x0, 0x0)
accept4(r0, 0x0, 0x0, 0x0)
r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
clone(0x400002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$TIOCSSOFTCAR(r4, 0x40096101, &(0x7f0000000040))
sendmsg$rds(0xffffffffffffffff, 0x0, 0x0)

09:26:27 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000000000220"], 0x0, 0x0, 0x0})

09:26:27 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0xe, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:26:27 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1622.883757] Sensor A: Brightness: 128
[ 1622.887637] Sensor A: Contrast: 128
[ 1622.891432] Sensor A: Hue: 0
[ 1622.898838] Sensor A: Saturation: 128
[ 1622.903213] Sensor A: ==================  END STATUS  ==================
09:26:27 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100980000000000]})

[ 1622.976619] binder: 30359:30362 got transaction with invalid data ptr
[ 1622.984475] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1622.998321] binder: 30359:30362 transaction failed 29201/-14, size 8194-0 line 3053
09:26:27 executing program 4:
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x800)
getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000280), &(0x7f00000002c0)=0xc)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r3=>0xffffffffffffffff}, 0x106, 0xf}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000140)={0x9, 0x108, 0xfa00, {r3, 0xed, "0eb605", "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"}}, 0x110)
bind$alg(r0, 0x0, 0x0)
accept4(r0, 0x0, 0x0, 0x0)
r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
clone(0x400002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$TIOCSSOFTCAR(r4, 0x40096101, &(0x7f0000000040))
sendmsg$rds(0xffffffffffffffff, 0x0, 0x0)

[ 1623.037251] Sensor A: =================  START STATUS  =================
[ 1623.048675] QAT: Device 0 not found
[ 1623.068318] Sensor A: Test Pattern: 75% Colorbar
[ 1623.082847] binder: undelivered TRANSACTION_ERROR: 29201
[ 1623.087455] Sensor A: Vertical Flip: false
[ 1623.123496] Sensor A: Horizontal Flip: false
[ 1623.138326] Sensor A: Brightness: 128
[ 1623.152758] Sensor A: Contrast: 128
[ 1623.156571] Sensor A: Hue: 0
[ 1623.174027] Sensor A: Saturation: 128
[ 1623.190115] QAT: Device 0 not found
[ 1623.194817] Sensor A: ==================  END STATUS  ==================
[ 1623.218826] Sensor A: =================  START STATUS  =================
[ 1623.226321] Sensor A: Test Pattern: 75% Colorbar
[ 1623.231200] Sensor A: Vertical Flip: false
[ 1623.236393] Sensor A: Horizontal Flip: false
[ 1623.240916] Sensor A: Brightness: 128
[ 1623.245221] Sensor A: Contrast: 128
[ 1623.248953] Sensor A: Hue: 0
[ 1623.252080] Sensor A: Saturation: 128
[ 1623.259651] Sensor A: ==================  END STATUS  ==================
09:26:28 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x6}]}, 0x10)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x4000, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x201000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x16, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x48040}, 0x10)

09:26:28 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000000000320"], 0x0, 0x0, 0x0})

09:26:28 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x40000000, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:28 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0xe00, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:26:28 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40106614, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000640)='\x00', 0xffffffffffffff9c}, 0x10)
sendmsg$unix(r2, &(0x7f0000000700)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000080)="cce389a54b64e9e4f566ea5b0404de57938f3320d4886d0a72bba29d75b7c5537164b6ecc6af4cb84e108495bf55b759c1a8f8b768283c6ddfdf28", 0x3b}, {&(0x7f0000000200)="50b4d457996664ccf8e57379d868084a86c59b0d8ba8eb0cffd81d30103cb0bd1096d36572a7cfd04bcfa05ade0b45fafe99b71d6e7522bd0b1ff31e39468646e4c47bdaf2b75af583c514a1da85f1056e3557baccbff79ae6f63c24880de44d897732f72c04fad1525ac3b627f750a820ad10aae9fe76e383f50ae795287f60a1ed1e00b132f6700b3e15d75c4534", 0x8f}, {&(0x7f00000002c0)="02ca62e67a0ad4e794b29357da7d98ffe202f3138b71f87aac9e6384aecd0000f98d8db9845047bc707dd527b7a7210eee1d1a218994a99611ec709e3a900f60a08191985b51ca7b8da90e7d0aadf2739e373209572a0d3ec8b4b20657735747a3bf2af09f5bd720d905c1c676612f20b22ad898acd0688d8b19da9c1819fc9d5f966be4605ed62ba9725654c1a6f1ffd1d05725d69f3e2c0f9f45729c75a60cefbe0c146188e2ec5fdbdf4b12aef81e3e96f3926d2e486914d6f11c91f2b98c25dbe9a6971b12b9dbcd659a541097e4b90048acef7b", 0xd6}, {&(0x7f00000003c0)="221cfb4a45e58e685f3d61fc0be8d1075ea6d4908c51a7b3b1da9e60cff3c1a5705ca9215ec2cf2fe47e837b39ea9e8df2e18207a9c20dfe1f8102fbc0760be27dff8d91e718f43f18a610c70a9416ca496593976265bb6dea8e34c8be44b1a33fbf193cfb1fff3a84ab3f0e020da50d646f3e4b806e4281679f7d09122c237d78952f716b05f342b014f8d387d1c13554f1925997bb9794e81dca7bba173356d96cea5721cc", 0xa6}, {&(0x7f0000000480)="d64efaaa1454d4e3d026374254c880e93bb7484a43cb9294cd5b59a0fe858f05f12bad44aab0e7b13dbb2962c81870a5aad2c3ad4030fce4719ea0ca08bac7374d5bbaaa9c28493c0335ace2a68ee3be424e7290018632b4356ee4dad533f145a934b8ef54683bb75eccb85bdcb9f3da070d3148da892ce669eccf8f2508c42126fd5c6cefe6dfdeb7e3ef06233eaa219cd879ffffff3f6877d38875de19c8cade789de2b7b3306a8be3db1b5f4beb6b1ca1e11a6457ccf141b63bb810756557", 0xc0}, {&(0x7f0000000100)="4bb44e9938683f79dde83effebb6a2b01a41237c69a9a3c2", 0x18}, {&(0x7f0000000540)="0ce44e1a87ddfac0d511cf70ac0a6be7f535c4a069cb017d5f98d99f605a97b42422a1a11ac27688b02b002491782fbb5a8ce160e2a341264144820ab747a2f44a1181970813c5d075a111d8094b139cbdc10e4855ba8373659ab8942e80a96cd89b95492e9bce1936beaae700d0eabbe4", 0x71}], 0x7, &(0x7f00000006c0)=[@rights={0x30, 0x1, 0x1, [r3, r3, r3, r1, r2, r4, r3, r0]}], 0x30, 0x10}, 0x240408c0)
fcntl$getownex(r1, 0x10, &(0x7f0000000000))
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000002000/0x3000)=nil)

09:26:28 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100f00000000000]})

[ 1623.377855] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1623.383987] Sensor A: =================  START STATUS  =================
[ 1623.396220] binder: 30388:30398 got transaction with invalid data ptr
[ 1623.403876] Sensor A: Test Pattern: 75% Colorbar
[ 1623.409186] Sensor A: Vertical Flip: false
[ 1623.422503] binder: 30388:30398 transaction failed 29201/-14, size 8195-0 line 3053
09:26:28 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x4000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
prctl$PR_GET_FPEMU(0x9, &(0x7f0000000140))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x208000, 0x0)
pipe2$9p(&(0x7f0000000040), 0x800)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
prctl$PR_SET_DUMPABLE(0x4, 0x1)
getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000080)=0xc)
sendmmsg$alg(r1, &(0x7f00000069c0)=[{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}], 0x2, 0x0)
getsockname(r2, &(0x7f0000000180)=@ipx, &(0x7f0000000240)=0x80)

09:26:28 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x60000000, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1623.454529] Sensor A: Horizontal Flip: false
[ 1623.468050] Sensor A: Brightness: 128
09:26:28 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000000000420"], 0x0, 0x0, 0x0})

[ 1623.504245] Sensor A: Contrast: 128
[ 1623.513697] binder: undelivered TRANSACTION_ERROR: 29201
[ 1623.525044] Sensor A: Hue: 0
09:26:28 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x3f00, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1623.562679] Sensor A: Saturation: 128
[ 1623.574374] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1623.585426] Sensor A: ==================  END STATUS  ==================
09:26:28 executing program 0:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0xe00, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:26:28 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109980000000000]})

[ 1623.649413] binder: 30414:30416 got transaction with invalid data ptr
[ 1623.670177] binder: 30414:30416 transaction failed 29201/-14, size 8196-0 line 3053
09:26:28 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0xfeffff07, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:28 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000680)=0xfff, 0x4)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @rand_addr=0x9}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x5, 0x4000)
connect$l2tp(r2, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x2, 0x0, 0x2, {0xa, 0x4e23, 0x6e8ec46c, @empty, 0x2}}}, 0x32)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0xffffff84)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1ffc}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x400100)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9)

09:26:28 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000000000520"], 0x0, 0x0, 0x0})

[ 1623.800415] binder: undelivered TRANSACTION_ERROR: 29201
[ 1623.809153] Sensor A: =================  START STATUS  =================
09:26:28 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x4000, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1623.850872] Sensor A: Test Pattern: 75% Colorbar
[ 1623.858543] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1623.891512] Sensor A: Vertical Flip: false
09:26:28 executing program 0:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0xe00, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1623.918475] Sensor A: Horizontal Flip: false
[ 1623.931466] binder: 30438:30443 got transaction with invalid data ptr
[ 1623.938356] Sensor A: Brightness: 128
[ 1623.951154] binder: 30438:30443 transaction failed 29201/-14, size 8197-0 line 3053
[ 1623.959276] Sensor A: Contrast: 128
[ 1623.993325] Sensor A: Hue: 0
[ 1623.996562] Sensor A: Saturation: 128
[ 1624.016496] Sensor A: ==================  END STATUS  ==================
[ 1624.032167] Sensor A: =================  START STATUS  =================
09:26:28 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0xff000000, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:29 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000000000620"], 0x0, 0x0, 0x0})

[ 1624.050368] Sensor A: Test Pattern: 75% Colorbar
[ 1624.062211] Sensor A: Vertical Flip: false
[ 1624.066804] Sensor A: Horizontal Flip: false
[ 1624.077677] Sensor A: Brightness: 128
[ 1624.086503] Sensor A: Contrast: 128
[ 1624.090707] binder: undelivered TRANSACTION_ERROR: 29201
[ 1624.095334] Sensor A: Hue: 0
09:26:29 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x1000000, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1624.104596] Sensor A: Saturation: 128
[ 1624.108652] Sensor A: ==================  END STATUS  ==================
[ 1624.139794] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:26:29 executing program 0:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0xe00, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:26:29 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]})

[ 1624.185116] binder: 30459:30460 got transaction with invalid data ptr
09:26:29 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1624.237095] binder: 30459:30460 transaction failed 29201/-14, size 8198-0 line 3053
[ 1624.294975] Sensor A: =================  START STATUS  =================
[ 1624.319980] Sensor A: Test Pattern: 75% Colorbar
[ 1624.326974] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1624.339100] Sensor A: Vertical Flip: false
09:26:29 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a '], 0x0, 0x0, 0x0})

[ 1624.349948] binder: undelivered TRANSACTION_ERROR: 29201
[ 1624.352103] Sensor A: Horizontal Flip: false
09:26:29 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1624.397391] Sensor A: Brightness: 128
[ 1624.412664] Sensor A: Contrast: 128
[ 1624.428341] Sensor A: Hue: 0
[ 1624.451771] binder: 30483:30484 got transaction with invalid data ptr
[ 1624.471829] Sensor A: Saturation: 128
[ 1624.498203] binder: 30483:30484 transaction failed 29201/-14, size 8199-0 line 3053
[ 1624.510458] Sensor A: ==================  END STATUS  ==================
[ 1624.546164] Sensor A: =================  START STATUS  =================
[ 1624.547192] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1624.554018] Sensor A: Test Pattern: 75% Colorbar
[ 1624.568338] Sensor A: Vertical Flip: false
[ 1624.576435] Sensor A: Horizontal Flip: false
[ 1624.581171] Sensor A: Brightness: 128
[ 1624.585671] Sensor A: Contrast: 128
[ 1624.589757] Sensor A: Hue: 0
[ 1624.595143] Sensor A: Saturation: 128
[ 1624.599963] Sensor A: ==================  END STATUS  ==================
[ 1624.614720] binder: undelivered TRANSACTION_ERROR: 29201
09:26:29 executing program 4:
syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x2000000000000006, 0x1ffffc)

09:26:29 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0xe000000, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:26:29 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n '], 0x0, 0x0, 0x0})

09:26:29 executing program 0:
gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0xe00, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

09:26:29 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:29 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x209980000000000]})

[ 1624.749703] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1624.761946] Sensor A: =================  START STATUS  =================
[ 1624.770068] Sensor A: Test Pattern: 75% Colorbar
[ 1624.777571] binder: 30498:30506 got transaction with invalid data ptr
[ 1624.779467] Sensor A: Vertical Flip: false
[ 1624.792761] Sensor A: Horizontal Flip: false
09:26:29 executing program 4:
r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x6, <r1=>0x0, 0x1, 0xb3c4})
ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000100)={0xf5, r1, 0x2, 0x465b3112})
r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x20000, 0x0)
ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000000080)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ftruncate(r0, 0x8200)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x101002, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0)
r5 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0)
mmap(&(0x7f00002e4000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
name_to_handle_at(r5, &(0x7f00002e4000)='./file\xff\xff', &(0x7f0000000000)={0x2f}, &(0x7f0000001ffc), 0x1400)

09:26:29 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1624.799955] binder: 30498:30506 transaction failed 29201/-14, size 8202-0 line 3053
[ 1624.803061] Sensor A: Brightness: 128
[ 1624.812963] Sensor A: Contrast: 128
[ 1624.821193] Sensor A: Hue: 0
[ 1624.826886] Sensor A: Saturation: 128
[ 1624.834505] Sensor A: ==================  END STATUS  ==================
09:26:29 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x309980000000000]})

09:26:29 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000000001220"], 0x0, 0x0, 0x0})

09:26:29 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x3f000000, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1624.936950] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1624.946694] binder: undelivered TRANSACTION_ERROR: 29201
09:26:29 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1625.035519] Sensor A: =================  START STATUS  =================
[ 1625.054786] binder: 30529:30533 got transaction with invalid data ptr
09:26:30 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x100000004e23, @multicast1}, 0x10)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000003200), &(0x7f0000003240)=0x8)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10)
shutdown(r1, 0x1)
recvmmsg(r0, &(0x7f0000003080)=[{{&(0x7f0000000000)=@x25, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)=""/174}, {&(0x7f0000000140)=""/48}, {&(0x7f00000031c0)=""/26}, {&(0x7f00000001c0)=""/120}, {&(0x7f0000000240)=""/168}, {&(0x7f0000000340)=""/163}], 0x0, &(0x7f0000000480)=""/52}, 0x7ff}, {{&(0x7f00000004c0)=@sco, 0x0, &(0x7f0000000940)=[{&(0x7f0000000540)=""/12}, {&(0x7f0000000580)=""/122}, {&(0x7f0000000600)=""/174}, {&(0x7f00000006c0)=""/139}, {&(0x7f0000000780)=""/35}, {&(0x7f00000007c0)=""/164}, {&(0x7f0000000880)=""/161}], 0x0, &(0x7f00000009c0)=""/194}, 0xff}, {{&(0x7f0000000ac0)=@xdp, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000b40)=""/58}], 0x0, &(0x7f0000000bc0)=""/104, 0xffffffffffffff28}, 0x6bcfbb2b}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/4096}], 0x0, &(0x7f0000001cc0)=""/255}, 0x5}, {{&(0x7f0000001dc0)=@pppoe, 0x0, &(0x7f0000002f40)=[{&(0x7f0000001e40)=""/202}, {&(0x7f0000001f40)=""/4096}], 0x0, &(0x7f0000002f80)=""/217}, 0x40}], 0x40000000000002e, 0x0, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x2, 0x80)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f0000000300)="0af51f023c123f3188a070")
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000010000105000600200000000a00000000000000000500a50000070000001f0000000000000300000000000002000100f5000000000000020000000005000500000000000a00000000000000000000000000000000170000000000000000000000000000"], 0x80}}, 0x0)
sendmmsg(r4, &(0x7f0000000180), 0x400000000000002, 0x0)
ioctl$IMHOLD_L1(r2, 0x80044948, &(0x7f0000000c40)=0x9)

[ 1625.084838] Sensor A: Test Pattern: 75% Colorbar
[ 1625.098683] Sensor A: Vertical Flip: false
[ 1625.105699] binder: 30529:30533 transaction failed 29201/-14, size 8210-0 line 3053
[ 1625.127570] Sensor A: Horizontal Flip: false
[ 1625.140564] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1625.145501] Sensor A: Brightness: 128
09:26:30 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H '], 0x0, 0x0, 0x0})

[ 1625.180866] Sensor A: Contrast: 128
[ 1625.195622] Sensor A: Hue: 0
[ 1625.201571] binder: undelivered TRANSACTION_ERROR: 29201
[ 1625.217828] Sensor A: Saturation: 128
09:26:30 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1625.236282] Sensor A: ==================  END STATUS  ==================
[ 1625.298178] Sensor A: =================  START STATUS  =================
[ 1625.308940] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1625.320824] binder: 30548:30550 got transaction with invalid data ptr
[ 1625.325259] Sensor A: Test Pattern: 75% Colorbar
[ 1625.332366] Sensor A: Vertical Flip: false
[ 1625.336937] Sensor A: Horizontal Flip: false
[ 1625.351968] Sensor A: Brightness: 128
[ 1625.375287] Sensor A: Contrast: 128
[ 1625.379181] Sensor A: Hue: 0
[ 1625.382431] binder: 30548:30550 transaction failed 29201/-14, size 8264-0 line 3053
[ 1625.391932] Sensor A: Saturation: 128
[ 1625.396415] Sensor A: ==================  END STATUS  ==================
[ 1625.459682] binder: undelivered TRANSACTION_ERROR: 29201
09:26:30 executing program 0:
gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0xe00, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

09:26:30 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x40000000, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:26:30 executing program 4:
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x16c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={<r3=>0x0, 0xec23936}, &(0x7f0000000100)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e23, 0x2, @ipv4={[], [], @local}, 0xfffffffffffffff9}}, 0x80000001, 0x58}, &(0x7f0000000140)=0x90)
r4 = openat$cgroup_int(r2, &(0x7f00000000c0)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0)
write(r4, &(0x7f0000000000)='\f4', 0x2)

09:26:30 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1409980000000000]})

09:26:30 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:30 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L '], 0x0, 0x0, 0x0})

[ 1625.630794] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1625.644040] binder: 30559:30564 got transaction with invalid data ptr
[ 1625.653075] Sensor A: =================  START STATUS  =================
09:26:30 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1625.683993] Sensor A: Test Pattern: 75% Colorbar
09:26:30 executing program 4:
r0 = socket$inet(0x2, 0x800, 0xffffffffffffffff)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080), 0x4)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x402001, 0x0)
setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000040), 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/183)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x4)

09:26:30 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00` '], 0x0, 0x0, 0x0})

[ 1625.713162] Sensor A: Vertical Flip: false
[ 1625.718446] Sensor A: Horizontal Flip: false
[ 1625.756492] Sensor A: Brightness: 128
09:26:30 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x100000000000000, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1625.790784] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1625.796395] Sensor A: Contrast: 128
09:26:30 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = eventfd(0x0)
ioctl$KVM_IRQFD(r3, 0x4020ae46, &(0x7f0000000000)={r4, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]})
syncfs(r0)
bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x30811001}, 0xc)
r5 = socket$inet6(0xa, 0x40000080806, 0x0)
r6 = dup3(r5, r5, 0x80000)
write$eventfd(r6, &(0x7f0000000080)=0x49, 0x8)
bind$inet6(r5, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
listen(r5, 0x9)
r7 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r7, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)

09:26:30 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h '], 0x0, 0x0, 0x0})

[ 1625.853388] Sensor A: Hue: 0
[ 1625.872730] Sensor A: Saturation: 128
[ 1625.882923] Sensor A: ==================  END STATUS  ==================
[ 1625.956686] Sensor A: =================  START STATUS  =================
[ 1625.979429] Sensor A: Test Pattern: 75% Colorbar
[ 1626.006375] Sensor A: Vertical Flip: false
[ 1626.051206] Sensor A: Horizontal Flip: false
[ 1626.064108] Sensor A: Brightness: 128
[ 1626.068193] Sensor A: Contrast: 128
[ 1626.074591] Sensor A: Hue: 0
[ 1626.096255] Sensor A: Saturation: 128
[ 1626.103855] Sensor A: ==================  END STATUS  ==================
09:26:31 executing program 0:
gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0xe00, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

09:26:31 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:31 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l '], 0x0, 0x0, 0x0})

09:26:31 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0xe00000000000000, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:26:31 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video35\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0xff, 0x40202)
getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000001c0)={<r3=>0x0, 0xffffffff80000001}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000240)={r3, @in={{0x2, 0x4e24, @loopback}}, [0x3a9c, 0x100, 0xfffffffffffffff7, 0x3, 0x4, 0x7, 0x6, 0x3, 0x3f, 0x9, 0x40, 0x100, 0x5, 0x9, 0x20000000]}, &(0x7f0000000340)=0x100)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x800007, 0x1, 0x2})
ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x4e22, @loopback}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, 0xe, 0x0, 0x0, 0x0, 0x551, &(0x7f0000000100)='ip6erspan0\x00', 0x6, 0x1, 0x4})
close(r0)

09:26:31 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1509980000000000]})

[ 1626.534975] Sensor A: =================  START STATUS  =================
[ 1626.556691] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1626.562703] Sensor A: Test Pattern: 75% Colorbar
[ 1626.570213] Sensor A: Vertical Flip: false
09:26:31 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t '], 0x0, 0x0, 0x0})

09:26:31 executing program 4:
gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0xe00, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

[ 1626.590159] Sensor A: Horizontal Flip: false
[ 1626.599755] Sensor A: Brightness: 128
[ 1626.609161] Sensor A: Contrast: 128
[ 1626.618159] Sensor A: Hue: 0
[ 1626.621344] Sensor A: Saturation: 128
[ 1626.629090] Sensor A: ==================  END STATUS  ==================
09:26:31 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:31 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x3f00000000000000, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:26:31 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ffffffffffffff]})

09:26:31 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z '], 0x0, 0x0, 0x0})

[ 1626.790635] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1626.878492] Sensor A: =================  START STATUS  =================
[ 1626.920857] Sensor A: Test Pattern: 75% Colorbar
[ 1626.929151] Sensor A: Vertical Flip: false
[ 1626.934410] Sensor A: Horizontal Flip: false
[ 1626.939132] Sensor A: Brightness: 128
[ 1626.943960] Sensor A: Contrast: 128
[ 1626.947781] Sensor A: Hue: 0
[ 1626.951101] Sensor A: Saturation: 128
[ 1626.956283] Sensor A: ==================  END STATUS  ==================
09:26:32 executing program 0:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0xe00, 0x0, @my=0x0}, 0x10)
tkill(r0, 0x1004000000016)

09:26:32 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:32 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00%'], 0x0, 0x0, 0x0})

09:26:32 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]})

09:26:32 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x4000000000000000, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1627.438305] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1627.442188] Sensor A: =================  START STATUS  =================
[ 1627.468009] Sensor A: Test Pattern: 75% Colorbar
[ 1627.477043] Sensor A: Vertical Flip: false
09:26:32 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0xfeffff0700000000, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:32 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00/'], 0x0, 0x0, 0x0})

[ 1627.492637] Sensor A: Horizontal Flip: false
[ 1627.503220] Sensor A: Brightness: 128
[ 1627.512429] Sensor A: Contrast: 128
[ 1627.531905] Sensor A: Hue: 0
09:26:32 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000240)={0x40000000, 0x4, "e09348dd61d9e07f2e3f60ebc26ef0d4f017f043eadd496cb6a961b38814f52f", 0x9, 0x4, 0xd4f, 0x0, 0x1f, 0x200, 0x401, 0x400, [0x7, 0x200, 0xfffffffffffffc00, 0xfffffffffffffbff]})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000040)="f7e9")
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x101ff, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2ec)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video35\x00', 0x2, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x15200})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, [0x8000, 0x3ff, 0xfffffffffffffffd, 0x2]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1627.564035] Sensor A: Saturation: 128
[ 1627.571670] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1627.579508] Sensor A: ==================  END STATUS  ==================
09:26:32 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0xffffffff00000000, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1627.619068] binder_transaction: 7 callbacks suppressed
[ 1627.619085] binder: 30676:30678 transaction failed 29201/-14, size 12032-0 line 3053
09:26:32 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffffffffffff]})

09:26:32 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00W'], 0x0, 0x0, 0x0})

09:26:32 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0xff00000000000000, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1627.771432] Sensor A: =================  START STATUS  =================
[ 1627.802937] binder_alloc: 30693: binder_alloc_buf size 22272 failed, no address space
[ 1627.820802] Sensor A: Test Pattern: 75% Colorbar
[ 1627.826487] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1627.836017] Sensor A: Vertical Flip: false
[ 1627.846538] Sensor A: Horizontal Flip: false
[ 1627.851285] binder: 30693:30694 transaction failed 29201/-28, size 22272-0 line 3035
[ 1627.852926] Sensor A: Brightness: 128
[ 1627.875938] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1627.894199] Sensor A: Contrast: 128
[ 1627.899859] Sensor A: Hue: 0
[ 1627.907989] Sensor A: Saturation: 128
[ 1627.912335] Sensor A: ==================  END STATUS  ==================
[ 1627.955041] Sensor A: =================  START STATUS  =================
[ 1627.994700] Sensor A: Test Pattern: 75% Colorbar
[ 1628.000925] Sensor A: Vertical Flip: false
[ 1628.003129] binder_release_work: 8 callbacks suppressed
[ 1628.003137] binder: undelivered TRANSACTION_ERROR: 29201
[ 1628.020973] Sensor A: Horizontal Flip: false
[ 1628.031108] Sensor A: Brightness: 128
[ 1628.036490] Sensor A: Contrast: 128
[ 1628.040271] Sensor A: Hue: 0
[ 1628.044697] Sensor A: Saturation: 128
[ 1628.051073] Sensor A: ==================  END STATUS  ==================
09:26:35 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`'], 0x0, 0x0, 0x0})

09:26:35 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0xe, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:26:35 executing program 0:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0xe00, 0x0, @my=0x0}, 0x10)
tkill(r0, 0x1004000000016)

09:26:35 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:35 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000240)={0x40000000, 0x4, "e09348dd61d9e07f2e3f60ebc26ef0d4f017f043eadd496cb6a961b38814f52f", 0x9, 0x4, 0xd4f, 0x0, 0x1f, 0x200, 0x401, 0x400, [0x7, 0x200, 0xfffffffffffffc00, 0xfffffffffffffbff]})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000040)="f7e9")
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x101ff, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2ec)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video35\x00', 0x2, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x15200})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, [0x8000, 0x3ff, 0xfffffffffffffffd, 0x2]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

09:26:35 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdfd]})

[ 1630.563972] Sensor A: =================  START STATUS  =================
[ 1630.573720] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1630.583176] Sensor A: Test Pattern: 75% Colorbar
[ 1630.595193] Sensor A: Vertical Flip: false
[ 1630.600066] binder_alloc: 30716: binder_alloc_buf size 24576 failed, no address space
[ 1630.606215] Sensor A: Horizontal Flip: false
09:26:35 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200001c0], 0x2, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1630.623178] Sensor A: Brightness: 128
[ 1630.627580] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1630.632700] Sensor A: Contrast: 128
[ 1630.646619] Sensor A: Hue: 0
[ 1630.655673] Sensor A: Saturation: 128
[ 1630.665666] Sensor A: ==================  END STATUS  ==================
[ 1630.677293] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:26:35 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe7]})

09:26:35 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200001c0], 0x3, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:35 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0xe00, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1630.733652] binder: 30716:30720 transaction failed 29201/-28, size 24576-0 line 3035
[ 1630.833700] Sensor A: =================  START STATUS  =================
[ 1630.854317] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1630.878892] Sensor A: Test Pattern: 75% Colorbar
09:26:35 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h'], 0x0, 0x0, 0x0})

[ 1630.887428] binder: undelivered TRANSACTION_ERROR: 29201
[ 1630.910035] Sensor A: Vertical Flip: false
[ 1630.931394] Sensor A: Horizontal Flip: false
09:26:35 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200001c0], 0x4, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1630.952641] Sensor A: Brightness: 128
[ 1630.961574] binder_alloc: 30749: binder_alloc_buf size 26624 failed, no address space
[ 1630.967413] Sensor A: Contrast: 128
[ 1630.975741] Sensor A: Hue: 0
[ 1630.993075] Sensor A: Saturation: 128
09:26:35 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000240)={0x40000000, 0x4, "e09348dd61d9e07f2e3f60ebc26ef0d4f017f043eadd496cb6a961b38814f52f", 0x9, 0x4, 0xd4f, 0x0, 0x1f, 0x200, 0x401, 0x400, [0x7, 0x200, 0xfffffffffffffc00, 0xfffffffffffffbff]})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000040)="f7e9")
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x101ff, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2ec)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video35\x00', 0x2, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x15200})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, [0x8000, 0x3ff, 0xfffffffffffffffd, 0x2]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1631.002034] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1631.006830] Sensor A: ==================  END STATUS  ==================
09:26:35 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x3f00, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1631.064970] Sensor A: =================  START STATUS  =================
[ 1631.081207] binder: 30749:30750 transaction failed 29201/-28, size 26624-0 line 3035
[ 1631.113309] Sensor A: Test Pattern: 75% Colorbar
[ 1631.135745] Sensor A: Vertical Flip: false
[ 1631.151979] Sensor A: Horizontal Flip: false
[ 1631.180379] Sensor A: Brightness: 128
[ 1631.183872] binder: undelivered TRANSACTION_ERROR: 29201
[ 1631.193843] Sensor A: Contrast: 128
[ 1631.197621] Sensor A: Hue: 0
[ 1631.200842] Sensor A: Saturation: 128
[ 1631.214409] Sensor A: ==================  END STATUS  ==================
[ 1632.243631] device bridge_slave_1 left promiscuous mode
[ 1632.249190] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1632.304055] device bridge_slave_0 left promiscuous mode
[ 1632.309623] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1632.445085] device hsr_slave_1 left promiscuous mode
[ 1632.500930] device hsr_slave_0 left promiscuous mode
[ 1632.558387] team0 (unregistering): Port device team_slave_1 removed
[ 1632.570161] team0 (unregistering): Port device team_slave_0 removed
[ 1632.585645] bond0 (unregistering): Releasing backup interface bond_slave_1
[ 1632.637236] bond0 (unregistering): Releasing backup interface bond_slave_0
[ 1632.729148] bond0 (unregistering): Released all slaves
09:26:38 executing program 0:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0xe00, 0x0, @my=0x0}, 0x10)
tkill(r0, 0x1004000000016)

09:26:38 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c000000000000000000000000000000000000000000ffe0"], 0x0, 0x0, 0x0})

09:26:38 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]})

09:26:38 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x4000, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:26:38 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000240)={0x40000000, 0x4, "e09348dd61d9e07f2e3f60ebc26ef0d4f017f043eadd496cb6a961b38814f52f", 0x9, 0x4, 0xd4f, 0x0, 0x1f, 0x200, 0x401, 0x400, [0x7, 0x200, 0xfffffffffffffc00, 0xfffffffffffffbff]})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000040)="f7e9")
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x101ff, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2ec)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video35\x00', 0x2, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x15200})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, [0x8000, 0x3ff, 0xfffffffffffffffd, 0x2]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

09:26:38 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200001c0], 0x5, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1633.659866] binder_alloc: 30768: binder_alloc_buf size 57600 failed, no address space
[ 1633.662412] Sensor A: =================  START STATUS  =================
[ 1633.686951] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1633.715781] Sensor A: Test Pattern: 75% Colorbar
[ 1633.727477] binder: 30768:30769 transaction failed 29201/-28, size 57599-0 line 3035
[ 1633.732346] Sensor A: Vertical Flip: false
[ 1633.749281] Sensor A: Horizontal Flip: false
09:26:38 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x1000000, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1633.764529] Sensor A: Brightness: 128
[ 1633.777911] Sensor A: Contrast: 128
[ 1633.790054] Sensor A: Hue: 0
[ 1633.800237] Sensor A: Saturation: 128
09:26:38 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00634040000000000000000000002c0000000000000000000000000000000000000000000080"], 0x0, 0x0, 0x0})

[ 1633.824560] Sensor A: ==================  END STATUS  ==================
[ 1633.858163] binder: undelivered TRANSACTION_ERROR: 29201
[ 1633.878788] Sensor A: =================  START STATUS  =================
[ 1633.909918] Sensor A: Test Pattern: 75% Colorbar
[ 1633.938823] Sensor A: Vertical Flip: false
[ 1633.960085] Sensor A: Horizontal Flip: false
[ 1633.969216] binder_alloc: 30785: binder_alloc_buf size 32768 failed, no address space
[ 1633.977902] Sensor A: Brightness: 128
[ 1633.990142] Sensor A: Contrast: 128
09:26:38 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000240)={0x40000000, 0x4, "e09348dd61d9e07f2e3f60ebc26ef0d4f017f043eadd496cb6a961b38814f52f", 0x9, 0x4, 0xd4f, 0x0, 0x1f, 0x200, 0x401, 0x400, [0x7, 0x200, 0xfffffffffffffc00, 0xfffffffffffffbff]})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000040)="f7e9")
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x101ff, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2ec)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video35\x00', 0x2, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x15200})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, [0x8000, 0x3ff, 0xfffffffffffffffd, 0x2]})

[ 1634.002500] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1634.009464] Sensor A: Hue: 0
[ 1634.021755] IPVS: ftp: loaded support on port[0] = 21
[ 1634.032608] Sensor A: Saturation: 128
[ 1634.042605] Sensor A: ==================  END STATUS  ==================
[ 1634.058440] binder: 30785:30786 transaction failed 29201/-28, size 32768-0 line 3035
09:26:39 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7]})

09:26:39 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0xe000000, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:26:39 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x0, 0x0, 0x0})

[ 1634.207520] binder: undelivered TRANSACTION_ERROR: 29201
[ 1634.258873] Sensor A: =================  START STATUS  =================
[ 1634.285111] binder_transaction: 7 callbacks suppressed
[ 1634.285121] binder: 30801:30802 got transaction with invalid data ptr
[ 1634.301247] Sensor A: Test Pattern: 75% Colorbar
[ 1634.343379] Sensor A: Vertical Flip: false
[ 1634.347858] binder: 30801:30802 transaction failed 29201/-14, size 2560-0 line 3053
[ 1634.355967] Sensor A: Horizontal Flip: false
[ 1634.371321] Sensor A: Brightness: 128
[ 1634.383973] Sensor A: Contrast: 128
[ 1634.395104] Sensor A: Hue: 0
[ 1634.404454] Sensor A: Saturation: 128
[ 1634.429954] Sensor A: ==================  END STATUS  ==================
[ 1634.475298] binder: undelivered TRANSACTION_ERROR: 29201
[ 1634.500178] Sensor A: =================  START STATUS  =================
[ 1634.540849] Sensor A: Test Pattern: 75% Colorbar
[ 1634.558339] Sensor A: Vertical Flip: 
[ 1634.558352] false
[ 1634.585132] Sensor A: Horizontal Flip: false
[ 1634.597637] chnl_net:caif_netlink_parms(): no params data found
[ 1634.600633] Sensor A: Brightness: 128
[ 1634.609269] Sensor A: Contrast: 128
[ 1634.619420] Sensor A: Hue: 0
[ 1634.634113] Sensor A: Saturation: 128
[ 1634.639760] Sensor A: ==================  END STATUS  ==================
[ 1634.690470] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1634.711957] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1634.722386] device bridge_slave_0 entered promiscuous mode
[ 1634.730928] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1634.737545] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1634.749180] device bridge_slave_1 entered promiscuous mode
[ 1634.787247] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 1634.797485] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 1634.827807] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 1634.836118] team0: Port device team_slave_0 added
[ 1634.841816] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 1634.849813] team0: Port device team_slave_1 added
[ 1634.861613] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 1634.870650] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 1634.935975] device hsr_slave_0 entered promiscuous mode
[ 1634.972976] device hsr_slave_1 entered promiscuous mode
[ 1635.013475] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 1635.021760] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 1635.041493] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1635.047921] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1635.054680] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1635.061061] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1635.114532] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[ 1635.120718] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1635.130972] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 1635.141614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1635.149589] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1635.157305] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1635.170290] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 1635.183698] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 1635.189773] 8021q: adding VLAN 0 to HW filter on device team0
[ 1635.207407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1635.216414] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1635.222822] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1635.251152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1635.259979] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1635.266399] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1635.294239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1635.301926] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1635.310084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1635.317738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1635.325907] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1635.336200] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1635.342212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1635.366922] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[ 1635.392024] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1635.486578] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:26:41 executing program 0:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0xe00, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:26:41 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x3f000000, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:26:41 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00%'], 0x0, 0x0, 0x0})

09:26:41 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000240)={0x40000000, 0x4, "e09348dd61d9e07f2e3f60ebc26ef0d4f017f043eadd496cb6a961b38814f52f", 0x9, 0x4, 0xd4f, 0x0, 0x1f, 0x200, 0x401, 0x400, [0x7, 0x200, 0xfffffffffffffc00, 0xfffffffffffffbff]})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000040)="f7e9")
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x101ff, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2ec)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video35\x00', 0x2, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x15200})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, [0x8000, 0x3ff, 0xfffffffffffffffd, 0x2]})

09:26:41 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ff]})

09:26:41 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200001c0], 0x6, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1636.730460] Sensor A: =================  START STATUS  =================
[ 1636.741283] binder: 30822:30823 got transaction with invalid data ptr
[ 1636.749913] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1636.761579] Sensor A: Test Pattern: 75% Colorbar
[ 1636.773578] Sensor A: Vertical Flip: false
[ 1636.779221] binder: 30822:30823 transaction failed 29201/-14, size 9472-0 line 3053
[ 1636.791245] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1636.801490] Sensor A: Horizontal Flip: false
[ 1636.810819] Sensor A: Brightness: 128
[ 1636.819592] Sensor A: Contrast: 128
[ 1636.831048] Sensor A: Hue: 0
[ 1636.852861] Sensor A: Saturation: 128
[ 1636.856906] Sensor A: ==================  END STATUS  ==================
09:26:41 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200001c0], 0x7, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:41 executing program 0:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0xe00, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:26:41 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00/'], 0x0, 0x0, 0x0})

[ 1636.896506] binder: undelivered TRANSACTION_ERROR: 29201
09:26:41 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd]})

09:26:41 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x40000000, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1636.982464] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1637.021399] binder: 30839:30845 got transaction with invalid data ptr
09:26:41 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000240)={0x40000000, 0x4, "e09348dd61d9e07f2e3f60ebc26ef0d4f017f043eadd496cb6a961b38814f52f", 0x9, 0x4, 0xd4f, 0x0, 0x1f, 0x200, 0x401, 0x400, [0x7, 0x200, 0xfffffffffffffc00, 0xfffffffffffffbff]})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000040)="f7e9")
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x101ff, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2ec)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video35\x00', 0x2, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x15200})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, [0x8000, 0x3ff, 0xfffffffffffffffd, 0x2]})

09:26:42 executing program 0:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0xe00, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:26:42 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200001c0], 0x60, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1637.070016] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1637.080455] binder: 30839:30845 transaction failed 29201/-14, size 12032-0 line 3053
[ 1637.092450] Sensor A: =================  START STATUS  =================
[ 1637.152373] Sensor A: Test Pattern: 75% Colorbar
[ 1637.195279] Sensor A: Vertical Flip: false
09:26:42 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00W'], 0x0, 0x0, 0x0})

[ 1637.225320] binder: undelivered TRANSACTION_ERROR: 29201
[ 1637.225900] Sensor A: Horizontal Flip: false
[ 1637.251095] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:26:42 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x100000000000000, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:26:42 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200001c0], 0x300, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1637.273307] Sensor A: Brightness: 128
[ 1637.277347] Sensor A: Contrast: 128
[ 1637.298833] binder_alloc: 30867: binder_alloc_buf size 22272 failed, no address space
09:26:42 executing program 0:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0xe00, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1637.330035] Sensor A: Hue: 0
[ 1637.350362] Sensor A: Saturation: 128
09:26:42 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000240)={0x40000000, 0x4, "e09348dd61d9e07f2e3f60ebc26ef0d4f017f043eadd496cb6a961b38814f52f", 0x9, 0x4, 0xd4f, 0x0, 0x1f, 0x200, 0x401, 0x400, [0x7, 0x200, 0xfffffffffffffc00, 0xfffffffffffffbff]})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000040)="f7e9")
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x101ff, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2ec)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video35\x00', 0x2, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x15200})
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, [0x8000, 0x3ff, 0xfffffffffffffffd, 0x2]})

[ 1637.376239] Sensor A: ==================  END STATUS  ==================
[ 1637.410096] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1637.445629] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1637.455158] binder: 30867:30869 transaction failed 29201/-28, size 22272-0 line 3035
[ 1637.468358] Sensor A: =================  START STATUS  =================
[ 1637.475713] Sensor A: Test Pattern: 75% Colorbar
[ 1637.490135] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1637.522112] Sensor A: Vertical Flip: false
09:26:42 executing program 0:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0xe00, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:26:42 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200001c0], 0x500, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1637.543295] Sensor A: Horizontal Flip: false
[ 1637.606769] binder: undelivered TRANSACTION_ERROR: 29201
[ 1637.613088] Sensor A: Brightness: 128
[ 1637.619759] Sensor A: Contrast: 128
[ 1637.643875] Sensor A: Hue: 0
[ 1637.660766] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1637.662028] Sensor A: Saturation: 128
[ 1637.682833] Sensor A: ==================  END STATUS  ==================
[ 1637.692056] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:26:42 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe7]})

09:26:42 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000240)={0x40000000, 0x4, "e09348dd61d9e07f2e3f60ebc26ef0d4f017f043eadd496cb6a961b38814f52f", 0x9, 0x4, 0xd4f, 0x0, 0x1f, 0x200, 0x401, 0x400, [0x7, 0x200, 0xfffffffffffffc00, 0xfffffffffffffbff]})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000040)="f7e9")
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x101ff, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2ec)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video35\x00', 0x2, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, [0x8000, 0x3ff, 0xfffffffffffffffd, 0x2]})

09:26:42 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`'], 0x0, 0x0, 0x0})

09:26:42 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0xe00000000000000, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:26:42 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200001c0], 0x600, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:42 executing program 0:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0xe00, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1637.838236] binder_alloc: 30907: binder_alloc_buf size 24576 failed, no address space
[ 1637.849494] Sensor A: =================  START STATUS  =================
[ 1637.861459] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1637.874682] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1637.892768] Sensor A: Test Pattern: 75% Colorbar
09:26:42 executing program 0:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0xe00, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1637.913597] binder: 30907:30908 transaction failed 29201/-28, size 24576-0 line 3035
[ 1637.913829] Sensor A: Vertical Flip: false
09:26:42 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000240)={0x40000000, 0x4, "e09348dd61d9e07f2e3f60ebc26ef0d4f017f043eadd496cb6a961b38814f52f", 0x9, 0x4, 0xd4f, 0x0, 0x1f, 0x200, 0x401, 0x400, [0x7, 0x200, 0xfffffffffffffc00, 0xfffffffffffffbff]})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000040)="f7e9")
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x101ff, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2ec)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, [0x8000, 0x3ff, 0xfffffffffffffffd, 0x2]})

[ 1637.962996] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1637.971656] Sensor A: Horizontal Flip: false
[ 1637.978685] Sensor A: Brightness: 128
[ 1637.998517] Sensor A: Contrast: 128
09:26:42 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x3f00000000000000, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:26:42 executing program 0:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0xe00, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1638.022372] Sensor A: Hue: 0
09:26:42 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h'], 0x0, 0x0, 0x0})

[ 1638.066171] Sensor A: Saturation: 128
[ 1638.080732] binder: undelivered TRANSACTION_ERROR: 29201
[ 1638.092765] Sensor A: ==================  END STATUS  ==================
09:26:43 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200001c0], 0x700, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1638.148924] binder_alloc: 30936: binder_alloc_buf size 26624 failed, no address space
09:26:43 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99800]})

09:26:43 executing program 0:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0xe00, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1638.212202] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1638.234824] binder: 30936:30937 transaction failed 29201/-28, size 26624-0 line 3035
09:26:43 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x4000000000000000, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:26:43 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000240)={0x40000000, 0x4, "e09348dd61d9e07f2e3f60ebc26ef0d4f017f043eadd496cb6a961b38814f52f", 0x9, 0x4, 0xd4f, 0x0, 0x1f, 0x200, 0x401, 0x400, [0x7, 0x200, 0xfffffffffffffc00, 0xfffffffffffffbff]})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000040)="f7e9")
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x101ff, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, [0x8000, 0x3ff, 0xfffffffffffffffd, 0x2]})

[ 1638.271347] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:26:43 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[ 1638.333060] Sensor A: =================  START STATUS  =================
[ 1638.362382] binder: undelivered TRANSACTION_ERROR: 29201
[ 1638.363220] Sensor A: Test Pattern: 75% Colorbar
09:26:43 executing program 0:
r0 = gettid()
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0xe00, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1638.375352] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1638.383979] Sensor A: Vertical Flip: false
[ 1638.432045] Sensor A: Horizontal Flip: false
[ 1638.455532] Sensor A: Brightness: 128
[ 1638.474280] Sensor A: Contrast: 128
[ 1638.481728] Sensor A: Hue: 0
[ 1638.490764] Sensor A: Saturation: 128
09:26:43 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

09:26:43 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200001c0], 0x2000, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

[ 1638.507492] Sensor A: ==================  END STATUS  ==================
[ 1638.526585] binder: send failed reply for transaction 3838 to 30958:30960
[ 1638.532963] Sensor A: =================  START STATUS  =================
[ 1638.550757] binder: undelivered TRANSACTION_COMPLETE
09:26:43 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0xffffffff00000000, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:26:43 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000240)={0x40000000, 0x4, "e09348dd61d9e07f2e3f60ebc26ef0d4f017f043eadd496cb6a961b38814f52f", 0x9, 0x4, 0xd4f, 0x0, 0x1f, 0x200, 0x401, 0x400, [0x7, 0x200, 0xfffffffffffffc00, 0xfffffffffffffbff]})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000040)="f7e9")
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, [0x8000, 0x3ff, 0xfffffffffffffffd, 0x2]})

[ 1638.577842] binder: undelivered TRANSACTION_ERROR: 29189
[ 1638.591187] Sensor A: Test Pattern: 75% Colorbar
[ 1638.606639] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1638.653994] Sensor A: Vertical Flip: false
[ 1638.658302] Sensor A: Horizontal Flip: false
[ 1638.674814] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1638.689434] Sensor A: Brightness: 128
09:26:43 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200001c0], 0x3f00, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:43 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x2, 0x0, 0x0})

[ 1638.700753] binder: send failed reply for transaction 3840 to 30968:30969
[ 1638.726763] binder: undelivered TRANSACTION_COMPLETE
[ 1638.732662] Sensor A: Contrast: 128
[ 1638.753207] binder: undelivered TRANSACTION_ERROR: 29189
[ 1638.761375] Sensor A: Hue: 0
[ 1638.783629] Sensor A: Saturation: 128
[ 1638.793961] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1638.794707] binder: 30985:30986 got transaction with invalid data ptr
[ 1638.823272] Sensor A: ==================  END STATUS  ==================
09:26:43 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x980001]})

09:26:43 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000240)={0x40000000, 0x4, "e09348dd61d9e07f2e3f60ebc26ef0d4f017f043eadd496cb6a961b38814f52f", 0x9, 0x4, 0xd4f, 0x0, 0x1f, 0x200, 0x401, 0x400, [0x7, 0x200, 0xfffffffffffffc00, 0xfffffffffffffbff]})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, [0x8000, 0x3ff, 0xfffffffffffffffd, 0x2]})

09:26:43 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0, 0xe}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1638.823313] binder: 30985:30986 transaction failed 29201/-14, size 8192-0 line 3053
[ 1638.844772] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1638.871877] binder: 30985:30986 ioctl c0306201 20000440 returned -14
09:26:43 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200001c0], 0x4000, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:43 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x3, 0x0, 0x0})

[ 1638.979321] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1638.980969] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1638.996807] binder: undelivered TRANSACTION_ERROR: 29201
[ 1639.003155] Sensor A: =================  START STATUS  =================
[ 1639.039617] Sensor A: Test Pattern: 75% Colorbar
[ 1639.048972] binder: 31008:31009 got transaction with invalid data ptr
[ 1639.060731] binder: 31008:31009 transaction failed 29201/-14, size 8192-0 line 3053
[ 1639.069189] binder: 31008:31009 ioctl c0306201 20000440 returned -14
[ 1639.073361] Sensor A: Vertical Flip: false
[ 1639.094585] Sensor A: Horizontal Flip: false
[ 1639.100409] binder: undelivered TRANSACTION_ERROR: 29201
[ 1639.130388] Sensor A: Brightness: 128
[ 1639.151541] Sensor A: Contrast: 128
[ 1639.181168] Sensor A: Hue: 0
[ 1639.193195] Sensor A: Saturation: 128
[ 1639.197248] Sensor A: ==================  END STATUS  ==================
[ 1639.209296] Sensor A: =================  START STATUS  =================
[ 1639.216842] Sensor A: Test Pattern: 75% Colorbar
[ 1639.221598] Sensor A: Vertical Flip: false
[ 1639.225920] Sensor A: Horizontal Flip: false
[ 1639.230343] Sensor A: Brightness: 128
[ 1639.234474] Sensor A: Contrast: 128
[ 1639.238126] Sensor A: Hue: 0
[ 1639.241147] Sensor A: Saturation: 128
[ 1639.245068] Sensor A: ==================  END STATUS  ==================
09:26:46 executing program 0:
r0 = gettid()
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0xe00, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:26:46 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0, 0xe00}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:26:46 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200001c0], 0x6000, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:46 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x4, 0x0, 0x0})

09:26:46 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000240)={0x40000000, 0x4, "e09348dd61d9e07f2e3f60ebc26ef0d4f017f043eadd496cb6a961b38814f52f", 0x9, 0x4, 0xd4f, 0x0, 0x1f, 0x200, 0x401, 0x400, [0x7, 0x200, 0xfffffffffffffc00, 0xfffffffffffffbff]})
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, [0x8000, 0x3ff, 0xfffffffffffffffd, 0x2]})

09:26:46 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x980900]})

[ 1641.544269] Sensor A: =================  START STATUS  =================
[ 1641.565643] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1641.565678] binder: 31019:31027 got transaction with invalid data ptr
[ 1641.574328] Sensor A: Test Pattern: 75% Colorbar
[ 1641.587687] binder: 31019:31027 transaction failed 29201/-14, size 8192-0 line 3053
[ 1641.596147] binder: 31019:31027 ioctl c0306201 20000440 returned -14
[ 1641.629914] Sensor A: Vertical Flip: false
09:26:46 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x5, 0x0, 0x0})

09:26:46 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, [0x8000, 0x3ff, 0xfffffffffffffffd, 0x2]})

[ 1641.649094] binder: undelivered TRANSACTION_ERROR: 29201
[ 1641.653330] Sensor A: Horizontal Flip: false
[ 1641.655526] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1641.668125] Sensor A: Brightness: 128
[ 1641.672937] Sensor A: Contrast: 128
[ 1641.692928] Sensor A: Hue: 0
[ 1641.713060] Sensor A: Saturation: 128
[ 1641.720507] Sensor A: ==================  END STATUS  ==================
[ 1641.739603] binder: 31038:31042 got transaction with invalid data ptr
09:26:46 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200001c0], 0xff00, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:46 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0, 0x3f00}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1641.772814] binder: 31038:31042 transaction failed 29201/-14, size 8192-0 line 3053
[ 1641.791584] Sensor A: =================  START STATUS  =================
09:26:46 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, [0x8000, 0x3ff, 0xfffffffffffffffd, 0x2]})

[ 1641.834714] binder: 31038:31042 ioctl c0306201 20000440 returned -14
[ 1641.846507] Sensor A: Test Pattern: 75% Colorbar
[ 1641.851309] Sensor A: Vertical Flip: false
[ 1641.870539] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1641.895329] Sensor A: Horizontal Flip: false
[ 1641.907528] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1641.908885] Sensor A: Brightness: 128
09:26:46 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x6, 0x0, 0x0})

[ 1641.947657] binder: undelivered TRANSACTION_ERROR: 29201
[ 1641.955940] Sensor A: Contrast: 128
[ 1641.965471] Sensor A: Hue: 0
[ 1641.973972] Sensor A: Saturation: 128
[ 1641.990641] Sensor A: ==================  END STATUS  ==================
[ 1642.071052] binder: 31058:31060 got transaction with invalid data ptr
[ 1642.101107] binder: 31058:31060 transaction failed 29201/-14, size 8192-0 line 3053
[ 1642.109553] binder: 31058:31060 ioctl c0306201 20000440 returned -14
[ 1642.141422] binder: undelivered TRANSACTION_ERROR: 29201
09:26:49 executing program 0:
r0 = gettid()
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0xe00, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:26:49 executing program 4:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, [0x8000, 0x3ff, 0xfffffffffffffffd, 0x2]})

09:26:49 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200001c0], 0x1000000, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:49 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0, 0x4000}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:26:49 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x980901]})

09:26:49 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x7, 0x0, 0x0})

[ 1644.632241] Sensor A: =================  START STATUS  =================
[ 1644.649677] binder: 31073:31075 got transaction with invalid data ptr
[ 1644.677480] binder: 31073:31075 transaction failed 29201/-14, size 8192-0 line 3053
[ 1644.678335] Sensor A: Test Pattern: 75% Colorbar
[ 1644.698776] binder: 31073:31075 ioctl c0306201 20000440 returned -14
09:26:49 executing program 4:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, [0x8000, 0x3ff, 0xfffffffffffffffd, 0x2]})

[ 1644.736235] Sensor A: Vertical Flip: false
[ 1644.751222] Sensor A: Horizontal Flip: false
09:26:49 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0xa, 0x0, 0x0})

[ 1644.782425] Sensor A: Brightness: 128
[ 1644.794930] binder: undelivered TRANSACTION_ERROR: 29201
09:26:49 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0, 0x1000000}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1644.841282] Sensor A: Contrast: 128
[ 1644.872757] Sensor A: Hue: 0
[ 1644.875962] Sensor A: Saturation: 128
[ 1644.879942] Sensor A: ==================  END STATUS  ==================
[ 1644.895272] binder: 31088:31090 got transaction with invalid data ptr
09:26:49 executing program 4:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, [0x8000, 0x3ff, 0xfffffffffffffffd, 0x2]})

[ 1644.929197] Sensor A: =================  START STATUS  =================
[ 1644.932491] binder: 31088:31090 transaction failed 29201/-14, size 8192-0 line 3053
[ 1644.949820] Sensor A: Test Pattern: 75% Colorbar
[ 1644.951091] binder: 31088:31090 ioctl c0306201 20000440 returned -14
[ 1644.973941] Sensor A: Vertical Flip: false
[ 1644.994430] Sensor A: Horizontal Flip: false
[ 1645.018638] Sensor A: Brightness: 128
[ 1645.033191] Sensor A: Contrast: 128
[ 1645.036972] Sensor A: Hue: 0
[ 1645.052742] Sensor A: Saturation: 128
09:26:49 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x12, 0x0, 0x0})

09:26:50 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, [0x8000, 0x3ff, 0xfffffffffffffffd, 0x2]})

[ 1645.062987] Sensor A: ==================  END STATUS  ==================
[ 1645.071535] binder: undelivered TRANSACTION_ERROR: 29201
[ 1645.200461] binder: 31100:31102 got transaction with invalid data ptr
[ 1645.238626] binder: 31100:31102 transaction failed 29201/-14, size 8192-0 line 3053
[ 1645.248993] binder: 31100:31102 ioctl c0306201 20000440 returned -14
[ 1645.307365] binder: undelivered TRANSACTION_ERROR: 29201
[ 1645.516593] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1645.535157] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:26:52 executing program 0:
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0xe00, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(0x0, 0x1004000000016)

09:26:52 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0, 0xe000000}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:26:52 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x980902]})

09:26:52 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, [0x8000, 0x3ff, 0xfffffffffffffffd, 0x2]})

09:26:52 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x48, 0x0, 0x0})

09:26:52 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200001c0], 0x2000000, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:52 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, [0x8000, 0x3ff, 0xfffffffffffffffd, 0x2]})

[ 1647.766237] binder: 31109:31110 got transaction with invalid data ptr
[ 1647.774743] Sensor A: =================  START STATUS  =================
[ 1647.790672] binder: 31109:31110 transaction failed 29201/-14, size 8192-0 line 3053
[ 1647.807549] binder: 31109:31110 ioctl c0306201 20000440 returned -14
[ 1647.814652] Sensor A: Test Pattern: 75% Colorbar
[ 1647.852906] Sensor A: Vertical Flip: false
[ 1647.857194] Sensor A: Horizontal Flip: false
[ 1647.901185] Sensor A: Brightness: 128
09:26:52 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x4c, 0x0, 0x0})

09:26:52 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0, 0x3f000000}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:26:52 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, [0x8000, 0x3ff, 0xfffffffffffffffd, 0x2]})

[ 1647.933861] binder: undelivered TRANSACTION_ERROR: 29201
[ 1647.961836] Sensor A: Contrast: 128
[ 1647.997243] Sensor A: Hue: 0
[ 1648.015724] Sensor A: Saturation: 128
[ 1648.044571] Sensor A: ==================  END STATUS  ==================
[ 1648.048944] binder: 31134:31135 got transaction with invalid data ptr
09:26:53 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x980903]})

09:26:53 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, [0x8000, 0x3ff, 0xfffffffffffffffd, 0x2]})

[ 1648.085994] binder: 31134:31135 transaction failed 29201/-14, size 8192-0 line 3053
[ 1648.108342] binder: 31134:31135 ioctl c0306201 20000440 returned -14
[ 1648.169861] Sensor A: =================  START STATUS  =================
[ 1648.197172] Sensor A: Test Pattern: 75% Colorbar
[ 1648.219119] binder: undelivered TRANSACTION_ERROR: 29201
[ 1648.242758] Sensor A: Vertical Flip: false
[ 1648.249805] Sensor A: Horizontal Flip: false
[ 1648.278486] Sensor A: Brightness: 128
[ 1648.294218] Sensor A: Contrast: 128
[ 1648.317042] Sensor A: Hue: 0
[ 1648.325969] Sensor A: Saturation: 128
[ 1648.339056] Sensor A: ==================  END STATUS  ==================
[ 1648.371336] Sensor A: =================  START STATUS  =================
[ 1648.392390] Sensor A: Test Pattern: 75% Colorbar
[ 1648.408523] Sensor A: Vertical Flip: false
[ 1648.420004] Sensor A: Horizontal Flip: false
[ 1648.430609] Sensor A: Brightness: 128
[ 1648.441706] Sensor A: Contrast: 128
[ 1648.451532] Sensor A: Hue: 0
[ 1648.458467] Sensor A: Saturation: 128
[ 1648.462363] Sensor A: ==================  END STATUS  ==================
09:26:53 executing program 0:
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0xe00, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(0x0, 0x1004000000016)

09:26:53 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x60, 0x0, 0x0})

09:26:53 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0, 0x40000000}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:26:53 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, [0x8000, 0x3ff, 0xfffffffffffffffd, 0x2]})

09:26:53 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x980914]})

[ 1648.728760] Sensor A: =================  START STATUS  =================
[ 1648.737632] binder: 31154:31155 got transaction with invalid data ptr
[ 1648.756684] binder: 31154:31155 transaction failed 29201/-14, size 8192-0 line 3053
[ 1648.765627] Sensor A: Test Pattern: 75% Colorbar
[ 1648.770413] Sensor A: Vertical Flip: false
[ 1648.780242] binder: 31154:31155 ioctl c0306201 20000440 returned -14
[ 1648.788456] Sensor A: Horizontal Flip: false
[ 1648.793460] Sensor A: Brightness: 128
[ 1648.812662] Sensor A: Contrast: 128
[ 1648.816376] Sensor A: Hue: 0
[ 1648.819412] Sensor A: Saturation: 128
[ 1648.833284] Sensor A: ==================  END STATUS  ==================
[ 1648.860261] binder: undelivered TRANSACTION_ERROR: 29201
[ 1649.101734] 
[ 1649.103531] ======================================================
[ 1649.109837] WARNING: possible circular locking dependency detected
[ 1649.116145] 4.20.0+ #10 Not tainted
[ 1649.119757] ------------------------------------------------------
[ 1649.126063] syz-executor2/31122 is trying to acquire lock:
[ 1649.131679] 00000000f61deb71 (&p->pi_lock){-.-.}, at: try_to_wake_up+0xb9/0x1480
[ 1649.139228] 
[ 1649.139228] but task is already holding lock:
[ 1649.145185] 00000000ce5758bd (&pgdat->kswapd_wait){....}, at: __wake_up_common_lock+0x19b/0x390
[ 1649.154054] 
[ 1649.154054] which lock already depends on the new lock.
[ 1649.154054] 
[ 1649.162358] 
[ 1649.162358] the existing dependency chain (in reverse order) is:
[ 1649.169964] 
[ 1649.169964] -> #4 (&pgdat->kswapd_wait){....}:
[ 1649.176454]        _raw_spin_lock_irqsave+0x95/0xcd
[ 1649.181468]        __wake_up_common_lock+0x19b/0x390
[ 1649.186562]        __wake_up+0xe/0x10
[ 1649.190356]        wakeup_kswapd+0x5ba/0x8f0
[ 1649.194756]        steal_suitable_fallback+0x50d/0x7c0
[ 1649.200046]        get_page_from_freelist+0x2f53/0x5190
[ 1649.205411]        __alloc_pages_nodemask+0x4fd/0xdc0
[ 1649.210597]        alloc_pages_current+0x107/0x210
[ 1649.215548]        __vmalloc_node_range+0x5cf/0x910
[ 1649.220572]        vmalloc+0x6b/0x90
[ 1649.224297]        do_replace_finish+0x105/0x2ac0
[ 1649.229130]        do_replace+0x38c/0x4d0
[ 1649.233271]        do_ebt_set_ctl+0xe6/0x110
[ 1649.237670]        nf_setsockopt+0x7d/0xd0
[ 1649.241901]        ip_setsockopt+0xdf/0x100
[ 1649.246218]        raw_setsockopt+0xe0/0x100
[ 1649.250620]        sock_common_setsockopt+0x9a/0xe0
[ 1649.255627]        __sys_setsockopt+0x1b0/0x3a0
[ 1649.260309]        __x64_sys_setsockopt+0xbe/0x150
[ 1649.265235]        do_syscall_64+0x1a3/0x800
[ 1649.269645]        entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1649.275341] 
[ 1649.275341] -> #3 (&(&zone->lock)->rlock){..-.}:
[ 1649.281576]        _raw_spin_lock_irqsave+0x95/0xcd
[ 1649.286588]        get_page_from_freelist+0x13d0/0x5190
[ 1649.291945]        __alloc_pages_nodemask+0x4fd/0xdc0
[ 1649.297132]        alloc_pages_current+0x107/0x210
[ 1649.302058]        depot_save_stack+0x3da/0x460
[ 1649.306725]        save_stack+0xa9/0xd0
[ 1649.310692]        kasan_kmalloc+0xcf/0xe0
[ 1649.314938]        kasan_slab_alloc+0xf/0x20
[ 1649.319368]        kmem_cache_alloc+0x11a/0x710
[ 1649.324036]        __debug_object_init+0xb1d/0x12d0
[ 1649.329050]        debug_object_activate+0x348/0x550
[ 1649.334155]        add_timer+0x4e6/0x1470
[ 1649.338301]        __queue_delayed_work+0x253/0x390
[ 1649.343341]        queue_delayed_work_on+0x19a/0x200
[ 1649.348469]        _free_event+0x1116/0x15d0
[ 1649.352867]        put_event+0x47/0x60
[ 1649.356748]        perf_event_release_kernel+0x890/0xf70
[ 1649.362191]        perf_release+0x37/0x50
[ 1649.366337]        __fput+0x3c5/0xb10
[ 1649.370135]        ____fput+0x16/0x20
[ 1649.373925]        task_work_run+0x1f4/0x2b0
[ 1649.378334]        exit_to_usermode_loop+0x32a/0x3b0
[ 1649.383434]        do_syscall_64+0x696/0x800
[ 1649.387840]        entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1649.393535] 
[ 1649.393535] -> #2 (&base->lock){-.-.}:
[ 1649.398906]        _raw_spin_lock_irqsave+0x95/0xcd
[ 1649.403915]        lock_timer_base+0xb7/0x2a0
[ 1649.408405]        add_timer+0x884/0x1470
[ 1649.412547]        __queue_delayed_work+0x253/0x390
[ 1649.417557]        queue_delayed_work_on+0x19a/0x200
[ 1649.422658]        psi_task_change+0x3ea/0x590
[ 1649.427232]        activate_task+0x1f8/0x470
[ 1649.431635]        wake_up_new_task+0x50c/0xd30
[ 1649.436299]        _do_fork+0x2a5/0x1170
[ 1649.440353]        kernel_thread+0x34/0x40
[ 1649.444581]        rest_init+0x28/0x37b
[ 1649.448550]        arch_call_rest_init+0xe/0x1b
[ 1649.453211]        start_kernel+0x882/0x8bd
[ 1649.457526]        x86_64_start_reservations+0x29/0x2b
[ 1649.462798]        x86_64_start_kernel+0x77/0x7b
[ 1649.467548]        secondary_startup_64+0xa4/0xb0
[ 1649.472373] 
[ 1649.472373] -> #1 (&rq->lock){-.-.}:
[ 1649.477565]        _raw_spin_lock+0x2f/0x40
[ 1649.481885]        task_fork_fair+0xb5/0x7a0
[ 1649.486287]        sched_fork+0x437/0xb90
[ 1649.490428]        copy_process+0x1ff6/0x8730
[ 1649.494916]        _do_fork+0x1a9/0x1170
[ 1649.498971]        kernel_thread+0x34/0x40
[ 1649.503203]        rest_init+0x28/0x37b
[ 1649.507172]        arch_call_rest_init+0xe/0x1b
[ 1649.511834]        start_kernel+0x882/0x8bd
[ 1649.516148]        x86_64_start_reservations+0x29/0x2b
[ 1649.521445]        x86_64_start_kernel+0x77/0x7b
[ 1649.526198]        secondary_startup_64+0xa4/0xb0
[ 1649.531032] 
[ 1649.531032] -> #0 (&p->pi_lock){-.-.}:
[ 1649.536403]        lock_acquire+0x1db/0x570
[ 1649.540716]        _raw_spin_lock_irqsave+0x95/0xcd
[ 1649.545727]        try_to_wake_up+0xb9/0x1480
[ 1649.550222]        default_wake_function+0x30/0x50
[ 1649.555148]        autoremove_wake_function+0x79/0x360
[ 1649.560417]        __wake_up_common+0x1d3/0x7d0
[ 1649.565083]        __wake_up_common_lock+0x1c6/0x390
[ 1649.570194]        __wake_up+0xe/0x10
[ 1649.573987]        wakeup_kswapd+0x5ba/0x8f0
[ 1649.578401]        steal_suitable_fallback+0x50d/0x7c0
[ 1649.583670]        get_page_from_freelist+0x2f53/0x5190
[ 1649.589043]        __alloc_pages_nodemask+0x4fd/0xdc0
[ 1649.594238]        alloc_pages_current+0x107/0x210
[ 1649.599168]        __vmalloc_node_range+0x5cf/0x910
[ 1649.604177]        vmalloc+0x6b/0x90
[ 1649.607900]        do_replace_finish+0x105/0x2ac0
[ 1649.612736]        do_replace+0x38c/0x4d0
[ 1649.616879]        do_ebt_set_ctl+0xe6/0x110
[ 1649.621298]        nf_setsockopt+0x7d/0xd0
[ 1649.625527]        ip_setsockopt+0xdf/0x100
[ 1649.629843]        raw_setsockopt+0xe0/0x100
[ 1649.634248]        sock_common_setsockopt+0x9a/0xe0
[ 1649.639255]        __sys_setsockopt+0x1b0/0x3a0
[ 1649.643919]        __x64_sys_setsockopt+0xbe/0x150
[ 1649.648872]        do_syscall_64+0x1a3/0x800
[ 1649.653277]        entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1649.658974] 
[ 1649.658974] other info that might help us debug this:
[ 1649.658974] 
[ 1649.667102] Chain exists of:
[ 1649.667102]   &p->pi_lock --> &(&zone->lock)->rlock --> &pgdat->kswapd_wait
[ 1649.667102] 
[ 1649.678540]  Possible unsafe locking scenario:
[ 1649.678540] 
[ 1649.684597]        CPU0                    CPU1
[ 1649.689251]        ----                    ----
[ 1649.693904]   lock(&pgdat->kswapd_wait);
[ 1649.697969]                                lock(&(&zone->lock)->rlock);
[ 1649.704760]                                lock(&pgdat->kswapd_wait);
[ 1649.711343]   lock(&p->pi_lock);
[ 1649.714694] 
[ 1649.714694]  *** DEADLOCK ***
[ 1649.714694] 
[ 1649.720739] 2 locks held by syz-executor2/31122:
[ 1649.725475]  #0: 00000000e4b7230f (&(&zone->lock)->rlock){..-.}, at: get_page_from_freelist+0x1ab1/0x5190
[ 1649.735220]  #1: 00000000ce5758bd (&pgdat->kswapd_wait){....}, at: __wake_up_common_lock+0x19b/0x390
[ 1649.744496] 
[ 1649.744496] stack backtrace:
[ 1649.748990] CPU: 0 PID: 31122 Comm: syz-executor2 Not tainted 4.20.0+ #10
[ 1649.755950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1649.765768] Call Trace:
[ 1649.768353]  dump_stack+0x1db/0x2d0
[ 1649.771981]  ? dump_stack_print_info.cold+0x20/0x20
[ 1649.776998]  ? print_stack_trace+0x77/0xb0
[ 1649.781240]  ? vprintk_func+0x86/0x189
[ 1649.785128]  print_circular_bug.isra.0.cold+0x1cc/0x28f
[ 1649.790488]  __lock_acquire+0x3014/0x4a30
[ 1649.794636]  ? mark_held_locks+0x100/0x100
[ 1649.798903]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[ 1649.803915]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1649.809473]  ? check_preemption_disabled+0x48/0x290
[ 1649.814518]  ? debug_smp_processor_id+0x1c/0x20
[ 1649.819178]  ? perf_trace_lock_acquire+0x138/0x7d0
[ 1649.824104]  ? lock_release+0xc40/0xc40
[ 1649.828082]  ? kasan_check_read+0x11/0x20
[ 1649.832227]  ? perf_trace_lock+0x750/0x750
[ 1649.836458]  ? kernel_text_address+0x73/0xf0
[ 1649.840859]  ? __kernel_text_address+0xd/0x40
[ 1649.845350]  lock_acquire+0x1db/0x570
[ 1649.849151]  ? try_to_wake_up+0xb9/0x1480
[ 1649.853296]  ? lock_release+0xc40/0xc40
[ 1649.857271]  ? trace_hardirqs_on_caller+0x310/0x310
[ 1649.862279]  ? save_trace+0xe0/0x290
[ 1649.865997]  _raw_spin_lock_irqsave+0x95/0xcd
[ 1649.870494]  ? try_to_wake_up+0xb9/0x1480
[ 1649.874639]  try_to_wake_up+0xb9/0x1480
[ 1649.878630]  ? migrate_swap_stop+0x920/0x920
[ 1649.883059]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1649.888600]  ? check_preemption_disabled+0x48/0x290
[ 1649.893633]  ? debug_smp_processor_id+0x1c/0x20
[ 1649.898298]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1649.903835]  default_wake_function+0x30/0x50
[ 1649.908240]  autoremove_wake_function+0x79/0x360
[ 1649.912991]  ? finish_wait+0x490/0x490
[ 1649.916880]  ? __lock_is_held+0xb6/0x140
[ 1649.920936]  __wake_up_common+0x1d3/0x7d0
[ 1649.925085]  ? kasan_check_read+0x11/0x20
[ 1649.929229]  ? wait_woken+0x250/0x250
[ 1649.933065]  ? zone_watermark_ok_safe+0x143/0x420
[ 1649.937917]  __wake_up_common_lock+0x1c6/0x390
[ 1649.942498]  ? __wake_up_common+0x7d0/0x7d0
[ 1649.946831]  ? __lock_is_held+0xb6/0x140
[ 1649.950891]  __wake_up+0xe/0x10
[ 1649.954164]  wakeup_kswapd+0x5ba/0x8f0
[ 1649.958084]  ? isolate_lru_page+0x1d90/0x1d90
[ 1649.962572]  ? print_usage_bug+0xd0/0xd0
[ 1649.966630]  ? add_lock_to_list.isra.0+0x450/0x450
[ 1649.971555]  ? get_page_from_freelist+0x2e36/0x5190
[ 1649.976568]  ? find_held_lock+0x35/0x120
[ 1649.980628]  steal_suitable_fallback+0x50d/0x7c0
[ 1649.985384]  ? move_freepages_block+0xff0/0xff0
[ 1649.990050]  ? unreserve_highatomic_pageblock+0x5b0/0x5b0
[ 1649.995597]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1650.001135]  get_page_from_freelist+0x2f53/0x5190
[ 1650.005990]  ? __isolate_free_page+0x6e0/0x6e0
[ 1650.010570]  ? trace_hardirqs_on+0xbd/0x310
[ 1650.014891]  ? cache_grow_begin.cold+0x2e/0x31
[ 1650.019471]  ? trace_hardirqs_off_caller+0x300/0x300
[ 1650.024571]  ? do_raw_spin_trylock+0x270/0x270
[ 1650.029151]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1650.034714]  ? print_usage_bug+0xd0/0xd0
[ 1650.038769]  ? _raw_spin_unlock_irq+0x5e/0x90
[ 1650.043263]  ? finish_task_switch+0x1e9/0xac0
[ 1650.047751]  ? finish_task_switch+0x1a8/0xac0
[ 1650.052240]  ? __switch_to_asm+0x34/0x70
[ 1650.056295]  ? __switch_to_asm+0x40/0x70
[ 1650.060349]  ? __switch_to_asm+0x34/0x70
[ 1650.064406]  ? __lock_acquire+0x572/0x4a30
[ 1650.068639]  ? __switch_to_asm+0x34/0x70
[ 1650.072713]  ? __switch_to_asm+0x40/0x70
[ 1650.076774]  ? __switch_to_asm+0x34/0x70
[ 1650.080848]  ? __switch_to_asm+0x40/0x70
[ 1650.084904]  ? __switch_to_asm+0x34/0x70
[ 1650.088960]  ? __switch_to_asm+0x40/0x70
[ 1650.093043]  ? mark_held_locks+0x100/0x100
[ 1650.097287]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1650.102052]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 1650.106645]  ? retint_kernel+0x2d/0x2d
[ 1650.110530]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1650.116071]  ? check_preemption_disabled+0x48/0x290
[ 1650.121090]  ? debug_smp_processor_id+0x1c/0x20
[ 1650.125753]  ? perf_trace_lock_acquire+0x138/0x7d0
[ 1650.130678]  ? add_lock_to_list.isra.0+0x450/0x450
[ 1650.135601]  ? perf_trace_lock+0x750/0x750
[ 1650.139832]  ? retint_kernel+0x2d/0x2d
[ 1650.143715]  ? fs_reclaim_acquire+0x20/0x20
[ 1650.148036]  ? find_held_lock+0x35/0x120
[ 1650.152095]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1650.157627]  ? should_fail+0x1e6/0xd22
[ 1650.161513]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1650.166611]  ? ___might_sleep+0x1e7/0x310
[ 1650.170764]  ? arch_local_save_flags+0x50/0x50
[ 1650.175343]  ? lock_release+0xc40/0xc40
[ 1650.179315]  ? rcu_pm_notify+0xd0/0xd0
[ 1650.183209]  __alloc_pages_nodemask+0x4fd/0xdc0
[ 1650.187883]  ? __alloc_pages_slowpath+0x2cc0/0x2cc0
[ 1650.192903]  ? ___might_sleep+0x1e7/0x310
[ 1650.197049]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[ 1650.202589]  alloc_pages_current+0x107/0x210
[ 1650.207007]  __vmalloc_node_range+0x5cf/0x910
[ 1650.211527]  ? vfree_atomic+0xe0/0xe0
[ 1650.215323]  ? mark_held_locks+0x100/0x100
[ 1650.219556]  ? do_replace_finish+0x105/0x2ac0
[ 1650.224056]  vmalloc+0x6b/0x90
[ 1650.227253]  ? do_replace_finish+0x105/0x2ac0
[ 1650.231743]  do_replace_finish+0x105/0x2ac0
[ 1650.236060]  ? debug_smp_processor_id+0x1c/0x20
[ 1650.240729]  ? perf_trace_lock_acquire+0x138/0x7d0
[ 1650.245653]  ? add_lock_to_list.isra.0+0x450/0x450
[ 1650.250574]  ? perf_trace_lock+0x750/0x750
[ 1650.254809]  ? ebt_unregister_table+0x80/0x80
[ 1650.259304]  ? __might_fault+0x12b/0x1e0
[ 1650.263364]  ? find_held_lock+0x35/0x120
[ 1650.267420]  ? __might_fault+0x12b/0x1e0
[ 1650.271480]  ? lock_acquire+0x1db/0x570
[ 1650.275450]  ? lock_downgrade+0x910/0x910
[ 1650.279590]  ? lock_release+0xc40/0xc40
[ 1650.283568]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1650.289101]  ? _copy_from_user+0xdd/0x150
[ 1650.293242]  do_replace+0x38c/0x4d0
[ 1650.296871]  ? compat_target_to_user+0x350/0x350
[ 1650.301635]  ? wait_for_completion+0x810/0x810
[ 1650.306220]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1650.311771]  ? ns_capable_common+0x141/0x170
[ 1650.316177]  do_ebt_set_ctl+0xe6/0x110
[ 1650.320114]  nf_setsockopt+0x7d/0xd0
[ 1650.323824]  ip_setsockopt+0xdf/0x100
[ 1650.327624]  raw_setsockopt+0xe0/0x100
[ 1650.331507]  sock_common_setsockopt+0x9a/0xe0
[ 1650.335997]  __sys_setsockopt+0x1b0/0x3a0
[ 1650.340165]  ? kernel_accept+0x310/0x310
[ 1650.344225]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 1650.348803]  ? trace_hardirqs_on+0xbd/0x310
[ 1650.353127]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1650.358500]  ? trace_hardirqs_off_caller+0x300/0x300
[ 1650.363601]  __x64_sys_setsockopt+0xbe/0x150
[ 1650.368021]  do_syscall_64+0x1a3/0x800
[ 1650.371909]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 1650.376838]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[ 1650.381882]  ? __switch_to_asm+0x34/0x70
[ 1650.385958]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1650.390803]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1650.395983] RIP: 0033:0x457ec9
[ 1650.399189] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1650.418088] RSP: 002b:00007f488ae1cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1650.425789] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457ec9
[ 1650.433053] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000004
[ 1650.440319] RBP: 000000000073bfa0 R08: 00000000000001a8 R09: 0000000000000000
[ 1650.447579] R10: 0000000020000000 R11: 0000000000000246 R12: 00007f488ae1d6d4
[ 1650.454850] R13: 00000000004c5563 R14: 00000000004d9238 R15: 00000000ffffffff
[ 1650.524294] kobject: 'loop0' (00000000a7b443bb): kobject_uevent_env
[ 1650.530800] kobject: 'loop0' (00000000a7b443bb): fill_kobj_path: path = '/devices/virtual/block/loop0'
[ 1650.717951] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1650.846552] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:26:56 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200001c0], 0x3000000, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:56 executing program 4:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, [0x8000, 0x3ff, 0xfffffffffffffffd, 0x2]})

09:26:56 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x68, 0x0, 0x0})

09:26:56 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0, 0x100000000000000}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:26:56 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x980915]})

09:26:56 executing program 0:
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0xe00, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(0x0, 0x1004000000016)

09:26:56 executing program 4:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, [0x8000, 0x3ff, 0xfffffffffffffffd, 0x2]})

[ 1651.439113] kobject: 'loop2' (00000000140f23a1): kobject_uevent_env
[ 1651.451223] kobject: 'loop2' (00000000140f23a1): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 1651.461222] Sensor A: =================  START STATUS  =================
[ 1651.470004] Sensor A: Test Pattern: 75% Colorbar
[ 1651.476566] binder: 31180:31182 got transaction with invalid data ptr
[ 1651.485082] Sensor A: Vertical Flip: false
[ 1651.488699] kobject: 'loop4' (00000000df9ebae6): kobject_uevent_env
[ 1651.489446] binder: 31180:31182 transaction failed 29201/-14, size 8192-0 line 3053
[ 1651.504694] Sensor A: Horizontal Flip: false
[ 1651.509576] Sensor A: Brightness: 128
[ 1651.515518] Sensor A: Contrast: 128
[ 1651.519286] kobject: 'loop4' (00000000df9ebae6): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 1651.532021] Sensor A: Hue: 0
09:26:56 executing program 4:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, [0x8000, 0x3ff, 0xfffffffffffffffd, 0x2]})

[ 1651.535435] binder: 31180:31182 ioctl c0306201 20000440 returned -14
[ 1651.542065] Sensor A: Saturation: 128
[ 1651.546159] Sensor A: ==================  END STATUS  ==================
09:26:56 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00001]})

09:26:56 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x6c, 0x0, 0x0})

09:26:56 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0, 0xe00000000000000}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1651.601676] binder: undelivered TRANSACTION_ERROR: 29201
[ 1651.620872] kobject: 'loop1' (00000000d58c96ed): kobject_uevent_env
[ 1651.630812] kobject: 'loop1' (00000000d58c96ed): fill_kobj_path: path = '/devices/virtual/block/loop1'
09:26:56 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, [0x8000, 0x3ff, 0xfffffffffffffffd, 0x2]})

[ 1651.666173] binder: 31197:31198 got transaction with invalid data ptr
[ 1651.676814] kobject: 'loop5' (00000000311ed32a): kobject_uevent_env
[ 1651.684597] binder: 31197:31198 transaction failed 29201/-14, size 8192-0 line 3053
[ 1651.697805] Sensor A: =================  START STATUS  =================
[ 1651.703926] kobject: 'loop5' (00000000311ed32a): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1651.718620] Sensor A: Test Pattern: 75% Colorbar
[ 1651.719561] kobject: 'loop3' (00000000541c13ee): kobject_uevent_env
[ 1651.730060] kobject: 'loop3' (00000000541c13ee): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 1651.737874] Sensor A: Vertical Flip: false
[ 1651.744528] kobject: 'kvm' (00000000830a0e22): kobject_uevent_env
[ 1651.749318] binder: 31197:31198 ioctl c0306201 20000440 returned -14
[ 1651.762773] kobject: 'kvm' (00000000830a0e22): fill_kobj_path: path = '/devices/virtual/misc/kvm'
[ 1651.766998] kobject: 'loop4' (00000000df9ebae6): kobject_uevent_env
[ 1651.776918] Sensor A: Horizontal Flip: false
[ 1651.794502] kobject: 'kvm' (00000000830a0e22): kobject_uevent_env
[ 1651.800382] kobject: 'loop4' (00000000df9ebae6): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 1651.812673] Sensor A: Brightness: 128
[ 1651.820528] kobject: 'kvm' (00000000830a0e22): fill_kobj_path: path = '/devices/virtual/misc/kvm'
[ 1651.840068] Sensor A: Contrast: 128
[ 1651.854460] binder: undelivered TRANSACTION_ERROR: 29201
[ 1651.864882] kobject: 'loop5' (00000000311ed32a): kobject_uevent_env
[ 1651.871344] kobject: 'loop5' (00000000311ed32a): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1651.874549] Sensor A: Hue: 0
[ 1651.911075] Sensor A: Saturation: 128
[ 1651.914002] kobject: 'loop3' (00000000541c13ee): kobject_uevent_env
[ 1651.924981] Sensor A: ==================  END STATUS  ==================
[ 1651.926683] kobject: 'loop3' (00000000541c13ee): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 1651.948735] Sensor A: =================  START STATUS  =================
[ 1651.958849] kobject: 'loop4' (00000000df9ebae6): kobject_uevent_env
[ 1651.969617] Sensor A: Test Pattern: 75% Colorbar
[ 1651.970997] kobject: 'loop4' (00000000df9ebae6): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 1651.987644] Sensor A: Vertical Flip: false
[ 1651.991901] Sensor A: Horizontal Flip: false
[ 1652.002649] Sensor A: Brightness: 128
[ 1652.011428] Sensor A: Contrast: 128
[ 1652.015321] Sensor A: Hue: 0
[ 1652.018480] Sensor A: Saturation: 128
[ 1652.022393] Sensor A: ==================  END STATUS  ==================
[ 1652.056104] kobject: 'loop1' (00000000d58c96ed): kobject_uevent_env
[ 1652.066538] kobject: 'loop1' (00000000d58c96ed): fill_kobj_path: path = '/devices/virtual/block/loop1'
[ 1652.265540] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1652.303592] kobject: 'loop0' (00000000a7b443bb): kobject_uevent_env
[ 1652.310061] kobject: 'loop0' (00000000a7b443bb): fill_kobj_path: path = '/devices/virtual/block/loop0'
[ 1652.822651] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:26:58 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200001c0], 0x4000000, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:26:58 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x74, 0x0, 0x0})

09:26:58 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0, 0x3f00000000000000}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:26:58 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, [0x8000, 0x3ff, 0xfffffffffffffffd, 0x2]})

09:26:58 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f000]})

09:26:58 executing program 0:
r0 = gettid()
timer_create(0x0, 0x0, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0xe00, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1653.221233] kobject: 'loop2' (00000000140f23a1): kobject_uevent_env
[ 1653.246399] Sensor A: =================  START STATUS  =================
[ 1653.251054] binder: 31219:31224 got transaction with invalid data ptr
[ 1653.260881] binder: 31219:31224 transaction failed 29201/-14, size 8192-0 line 3053
[ 1653.262451] kobject: 'kvm' (00000000830a0e22): kobject_uevent_env
[ 1653.269322] binder: 31219:31224 ioctl c0306201 20000440 returned -14
[ 1653.275107] kobject: 'loop2' (00000000140f23a1): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 1653.298507] Sensor A: Test Pattern: 75% Colorbar
[ 1653.303985] Sensor A: Vertical Flip: false
[ 1653.309059] kobject: 'kvm' (00000000830a0e22): fill_kobj_path: path = '/devices/virtual/misc/kvm'
09:26:58 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x7a, 0x0, 0x0})

[ 1653.326980] Sensor A: Horizontal Flip: false
[ 1653.340486] kobject: 'loop5' (00000000311ed32a): kobject_uevent_env
[ 1653.345395] binder: undelivered TRANSACTION_ERROR: 29201
[ 1653.348026] kobject: 'loop5' (00000000311ed32a): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1653.366381] Sensor A: Brightness: 128
09:26:58 executing program 0:
r0 = gettid()
timer_create(0x0, 0x0, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0xe00, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1653.374276] kobject: 'kvm' (00000000830a0e22): kobject_uevent_env
[ 1653.375000] binder: 31237:31239 got transaction with invalid data ptr
[ 1653.380536] kobject: 'kvm' (00000000830a0e22): fill_kobj_path: path = '/devices/virtual/misc/kvm'
[ 1653.392681] Sensor A: Contrast: 128
[ 1653.422639] Sensor A: Hue: 0
[ 1653.425820] Sensor A: Saturation: 128
[ 1653.431467] kobject: 'loop0' (00000000a7b443bb): kobject_uevent_env
[ 1653.438165] Sensor A: ==================  END STATUS  ==================
[ 1653.449727] binder: 31237:31239 transaction failed 29201/-14, size 8192-0 line 3053
[ 1653.458819] kobject: 'loop0' (00000000a7b443bb): fill_kobj_path: path = '/devices/virtual/block/loop0'
09:26:58 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0, 0x4000000000000000}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:26:58 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, [0x8000, 0x3ff, 0xfffffffffffffffd, 0x2]})

[ 1653.466939] binder: 31237:31239 ioctl c0306201 20000440 returned -14
[ 1653.482142] Sensor A: =================  START STATUS  =================
[ 1653.502472] kobject: 'loop4' (00000000df9ebae6): kobject_uevent_env
[ 1653.517324] Sensor A: Test Pattern: 75% Colorbar
[ 1653.527210] kobject: 'kvm' (00000000830a0e22): kobject_uevent_env
[ 1653.535855] kobject: 'loop4' (00000000df9ebae6): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 1653.546678] Sensor A: Vertical Flip: false
[ 1653.555560] Sensor A: Horizontal Flip: false
[ 1653.560121] kobject: 'kvm' (00000000830a0e22): fill_kobj_path: path = '/devices/virtual/misc/kvm'
[ 1653.569735] kobject: 'loop3' (00000000541c13ee): kobject_uevent_env
09:26:58 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x300, 0x0, 0x0})

09:26:58 executing program 0:
r0 = gettid()
timer_create(0x0, 0x0, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0xe00, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1653.576334] Sensor A: Brightness: 128
[ 1653.576826] binder: undelivered TRANSACTION_ERROR: 29201
[ 1653.580236] Sensor A: Contrast: 128
[ 1653.589420] kobject: 'loop3' (00000000541c13ee): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 1653.599578] Sensor A: Hue: 0
[ 1653.603244] Sensor A: Saturation: 128
[ 1653.611833] kobject: 'kvm' (00000000830a0e22): kobject_uevent_env
[ 1653.633114] kobject: 'loop5' (00000000311ed32a): kobject_uevent_env
[ 1653.641660] Sensor A: ==================  END STATUS  ==================
[ 1653.649310] kobject: 'loop5' (00000000311ed32a): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1653.654755] kobject: 'kvm' (00000000830a0e22): fill_kobj_path: path = '/devices/virtual/misc/kvm'
[ 1653.671169] binder: 31254:31255 got transaction with invalid data ptr
[ 1653.683584] binder: 31254:31255 transaction failed 29201/-14, size 8192-0 line 3053
[ 1653.724510] kobject: 'loop1' (00000000d58c96ed): kobject_uevent_env
[ 1653.724831] binder: 31254:31255 ioctl c0306201 20000440 returned -14
[ 1653.730951] kobject: 'loop1' (00000000d58c96ed): fill_kobj_path: path = '/devices/virtual/block/loop1'
[ 1653.773616] kobject: 'loop3' (00000000541c13ee): kobject_uevent_env
[ 1653.782432] kobject: 'loop3' (00000000541c13ee): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 1653.814428] kobject: 'loop0' (00000000a7b443bb): kobject_uevent_env
[ 1653.825286] kobject: 'loop0' (00000000a7b443bb): fill_kobj_path: path = '/devices/virtual/block/loop0'
[ 1653.839277] binder: undelivered TRANSACTION_ERROR: 29201
[ 1653.842419] kobject: 'loop4' (00000000df9ebae6): kobject_uevent_env
[ 1653.851349] kobject: 'loop4' (00000000df9ebae6): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 1653.870925] kobject: 'loop5' (00000000311ed32a): kobject_uevent_env
[ 1653.887501] kobject: 'loop5' (00000000311ed32a): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1654.350236] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1654.856461] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:27:00 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200001c0], 0x5000000, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:27:00 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})

09:27:00 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0, 0xffffffff00000000}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:27:00 executing program 0:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0xe00, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:27:00 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0)

09:27:00 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x500, 0x0, 0x0})

[ 1655.468236] kobject: 'loop2' (00000000140f23a1): kobject_uevent_env
[ 1655.495702] kobject: 'kvm' (00000000830a0e22): kobject_uevent_env
[ 1655.496785] kobject: 'loop2' (00000000140f23a1): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 1655.503392] Sensor A: =================  START STATUS  =================
[ 1655.520148] kobject: 'kvm' (00000000830a0e22): fill_kobj_path: path = '/devices/virtual/misc/kvm'
[ 1655.520994] binder: 31269:31271 got transaction with invalid data ptr
[ 1655.530929] kobject: 'kvm' (00000000830a0e22): kobject_uevent_env
[ 1655.542643] Sensor A: Test Pattern: 75% Colorbar
[ 1655.547905] kobject: 'kvm' (00000000830a0e22): fill_kobj_path: path = '/devices/virtual/misc/kvm'
[ 1655.559120] Sensor A: Vertical Flip: false
[ 1655.563666] Sensor A: Horizontal Flip: false
09:27:00 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0)

[ 1655.579534] binder: 31269:31271 transaction failed 29201/-14, size 8192-0 line 3053
[ 1655.582821] Sensor A: Brightness: 128
[ 1655.601952] Sensor A: Contrast: 128
[ 1655.603381] binder: 31269:31271 ioctl c0306201 20000440 returned -14
[ 1655.607948] Sensor A: Hue: 0
[ 1655.617006] kobject: 'loop4' (00000000df9ebae6): kobject_uevent_env
09:27:00 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0xf)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[ 1655.628167] Sensor A: Saturation: 128
[ 1655.631279] kobject: 'loop4' (00000000df9ebae6): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 1655.636155] Sensor A: ==================  END STATUS  ==================
[ 1655.648776] kobject: 'kvm' (00000000830a0e22): kobject_uevent_env
[ 1655.665580] kobject: 'kvm' (00000000830a0e22): fill_kobj_path: path = '/devices/virtual/misc/kvm'
09:27:00 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x600, 0x0, 0x0})

[ 1655.691062] binder: undelivered TRANSACTION_ERROR: 29201
[ 1655.697355] kobject: 'kvm' (00000000830a0e22): kobject_uevent_env
[ 1655.715542] kobject: 'loop3' (00000000541c13ee): kobject_uevent_env
[ 1655.719746] kobject: 'kvm' (00000000830a0e22): fill_kobj_path: path = '/devices/virtual/misc/kvm'
[ 1655.722000] kobject: 'loop3' (00000000541c13ee): fill_kobj_path: path = '/devices/virtual/block/loop3'
09:27:00 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1009800]})

[ 1655.722437] kobject: 'loop5' (00000000311ed32a): kobject_uevent_env
[ 1655.746600] binder: 31290:31291 got transaction with invalid data ptr
[ 1655.780593] binder: 31290:31291 transaction failed 29201/-14, size 8192-0 line 3053
09:27:00 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0)

[ 1655.784258] kobject: 'loop5' (00000000311ed32a): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1655.806625] Sensor A: =================  START STATUS  =================
[ 1655.814997] binder: 31290:31291 ioctl c0306201 20000440 returned -14
[ 1655.817441] kobject: 'loop1' (00000000d58c96ed): kobject_uevent_env
[ 1655.830051] Sensor A: Test Pattern: 75% Colorbar
[ 1655.849096] kobject: 'loop1' (00000000d58c96ed): fill_kobj_path: path = '/devices/virtual/block/loop1'
[ 1655.855916] Sensor A: Vertical Flip: false
[ 1655.875406] kobject: 'kvm' (00000000830a0e22): kobject_uevent_env
[ 1655.890562] kobject: 'loop4' (00000000df9ebae6): kobject_uevent_env
09:27:00 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x700, 0x0, 0x0})

[ 1655.897332] binder: undelivered TRANSACTION_ERROR: 29201
[ 1655.903156] Sensor A: Horizontal Flip: false
[ 1655.916150] kobject: 'kvm' (00000000830a0e22): fill_kobj_path: path = '/devices/virtual/misc/kvm'
[ 1655.927703] Sensor A: Brightness: 128
[ 1655.928632] kobject: 'loop4' (00000000df9ebae6): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 1655.938276] binder: 31300:31301 got transaction with invalid data ptr
[ 1655.948569] Sensor A: Contrast: 128
[ 1655.958564] kobject: 'loop5' (00000000311ed32a): kobject_uevent_env
[ 1655.969966] kobject: 'kvm' (00000000830a0e22): kobject_uevent_env
[ 1655.976477] Sensor A: Hue: 0
[ 1655.979718] Sensor A: Saturation: 128
[ 1655.983526] kobject: 'loop5' (00000000311ed32a): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1655.983942] kobject: 'loop3' (00000000541c13ee): kobject_uevent_env
[ 1655.993572] binder: 31300:31301 transaction failed 29201/-14, size 8192-0 line 3053
[ 1656.010001] kobject: 'kvm' (00000000830a0e22): fill_kobj_path: path = '/devices/virtual/misc/kvm'
[ 1656.011987] kobject: 'loop3' (00000000541c13ee): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 1656.032749] Sensor A: ==================  END STATUS  ==================
[ 1656.039822] binder: 31300:31301 ioctl c0306201 20000440 returned -14
[ 1656.069424] Sensor A: =================  START STATUS  =================
[ 1656.109485] Sensor A: Test Pattern: 75% Colorbar
[ 1656.134967] Sensor A: Vertical Flip: false
[ 1656.143159] binder: undelivered TRANSACTION_ERROR: 29201
[ 1656.148888] Sensor A: Horizontal Flip: false
[ 1656.154916] kobject: 'loop5' (00000000311ed32a): kobject_uevent_env
[ 1656.157701] Sensor A: Brightness: 128
[ 1656.161395] kobject: 'loop5' (00000000311ed32a): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1656.165510] Sensor A: Contrast: 128
[ 1656.179048] Sensor A: Hue: 0
[ 1656.182198] Sensor A: Saturation: 128
[ 1656.186700] Sensor A: ==================  END STATUS  ==================
[ 1656.213709] kobject: 'loop1' (00000000d58c96ed): kobject_uevent_env
[ 1656.220190] kobject: 'loop1' (00000000d58c96ed): fill_kobj_path: path = '/devices/virtual/block/loop1'
[ 1656.876696] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
[ 1657.336373] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask
09:27:03 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200001c0], 0x6000000, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)

09:27:03 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x20000210)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:27:03 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x8000, 0x3ff, 0xfffffffffffffffd, 0x2]})

[ 1658.202249] kobject: 'loop2' (00000000140f23a1): kobject_uevent_env
[ 1658.212034] kobject: 'loop2' (00000000140f23a1): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 1658.218035] kobject: 'kvm' (00000000830a0e22): kobject_uevent_env
[ 1658.242923] kobject: 'kvm' (00000000830a0e22): fill_kobj_path: path = '/devices/virtual/misc/kvm'
[ 1658.270207] kobject: 'kvm' (00000000830a0e22): kobject_uevent_env
[ 1658.294631] kobject: 'kvm' (00000000830a0e22): fill_kobj_path: path = '/devices/virtual/misc/kvm'
[ 1658.339880] kobject: 'loop3' (00000000541c13ee): kobject_uevent_env
[ 1658.364843] kobject: 'loop3' (00000000541c13ee): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 1658.411980] kobject: 'loop4' (00000000df9ebae6): kobject_uevent_env
[ 1658.420354] kobject: 'loop4' (00000000df9ebae6): fill_kobj_path: path = '/devices/virtual/block/loop4'
09:27:03 executing program 0:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0xe00, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

09:27:03 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0xa00, 0x0, 0x0})

09:27:03 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100f000]})

09:27:03 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x20000000}, &(0x7f0000044000))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
r3 = accept4(r2, &(0x7f00000000c0)=@ipx, &(0x7f0000000140)=0x80, 0x80800)
r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x20000, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={<r5=>0x0, @remote, @loopback}, &(0x7f00000001c0)=0xc)
connect$can_bcm(r3, &(0x7f0000000240)={0x1d, r5}, 0x10)
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000300)={0x3, 0x0, [{0x400, 0x3, 0x0, 0x0, @irqchip={0x3, 0x3}}, {0xe62, 0x4, 0x0, 0x0, @adapter={0x2d8, 0x2, 0x0, 0x9, 0x5e9}}, {0x6, 0x7, 0x0, 0x0, @adapter={0x7fffffff, 0x1, 0x8, 0x2, 0x6}}]})
connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'nr0\x00', 0x2})
ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000080))
tkill(r0, 0x1004000000016)

09:27:03 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x8000, 0x3ff, 0xfffffffffffffffd, 0x2]})

[ 1658.525632] kobject: 'loop0' (00000000a7b443bb): kobject_uevent_env
[ 1658.536913] kobject: 'loop0' (00000000a7b443bb): fill_kobj_path: path = '/devices/virtual/block/loop0'
[ 1658.555334] kobject: 'kvm' (00000000830a0e22): kobject_uevent_env
[ 1658.558133] Sensor A: =================  START STATUS  =================
[ 1658.561635] kobject: 'kvm' (00000000830a0e22): fill_kobj_path: path = '/devices/virtual/misc/kvm'
[ 1658.589522] binder: 31329:31331 got transaction with invalid data ptr
[ 1658.592680] Sensor A: Test Pattern: 75% Colorbar
[ 1658.600988] Sensor A: Vertical Flip: false
[ 1658.602924] binder: 31329:31331 transaction failed 29201/-14, size 8192-0 line 3053
[ 1658.619572] Sensor A: Horizontal Flip: false
[ 1658.629891] Sensor A: Brightness: 128
[ 1658.631126] binder: 31329:31331 ioctl c0306201 20000440 returned -14
[ 1658.639506] Sensor A: Contrast: 128
[ 1658.649740] Sensor A: Hue: 0
[ 1658.655799] kobject: 'kvm' (00000000830a0e22): kobject_uevent_env
[ 1658.657570] Sensor A: Saturation: 128
[ 1658.662182] kobject: 'kvm' (00000000830a0e22): fill_kobj_path: path = '/devices/virtual/misc/kvm'
[ 1658.677808] Sensor A: ==================  END STATUS  ==================
09:27:03 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x1200, 0x0, 0x0})

[ 1658.723386] Sensor A: =================  START STATUS  =================
[ 1658.731759] binder: undelivered TRANSACTION_ERROR: 29201
[ 1658.737721] kobject: 'loop5' (00000000311ed32a): kobject_uevent_env
[ 1658.742938] Sensor A: Test Pattern: 75% Colorbar
[ 1658.751311] kobject: 'loop5' (00000000311ed32a): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1658.752819] Sensor A: Vertical Flip: false
09:27:03 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x8000, 0x3ff, 0xfffffffffffffffd, 0x2]})

[ 1658.794117] Sensor A: Horizontal Flip: false
[ 1658.800818] kobject: 'loop4' (00000000df9ebae6): kobject_uevent_env
[ 1658.810112] Sensor A: Brightness: 128
[ 1658.823354] Sensor A: Contrast: 128
[ 1658.837724] Sensor A: Hue: 0
[ 1658.841359] kobject: 'loop4' (00000000df9ebae6): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 1658.853473] Sensor A: Saturation: 128
[ 1658.859119] binder: 31340:31343 got transaction with invalid data ptr
[ 1658.862376] kobject: 'kvm' (00000000830a0e22): kobject_uevent_env
[ 1658.869208] Sensor A: ==================  END STATUS  ==================
[ 1658.883674] binder: 31340:31343 transaction failed 29201/-14, size 8192-0 line 3053
09:27:03 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0x5646, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000400)={0xc0000000, 0x0, "594b1405d25afdb7bc682acfd48f746ebda9c7e8d788fa322119ec814eea7d08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1099800]})

[ 1658.900888] kobject: 'kvm' (00000000830a0e22): fill_kobj_path: path = '/devices/virtual/misc/kvm'
[ 1658.904264] binder: 31340:31343 ioctl c0306201 20000440 returned -14
[ 1658.931492] kobject: 'kvm' (00000000830a0e22): kobject_uevent_env
[ 1658.938457] kobject: 'kvm' (00000000830a0e22): fill_kobj_path: path = '/devices/virtual/misc/kvm'
09:27:03 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
geteuid()
getresgid(0x0, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
getgid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x26, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x2000, 0x0, 0x0})

[ 1658.963608] kobject: 'loop1' (00000000d58c96ed): kobject_uevent_env
[ 1658.970093] kobject: 'loop1' (00000000d58c96ed): fill_kobj_path: path = '/devices/virtual/block/loop1'
[ 1658.997653] binder: undelivered TRANSACTION_ERROR: 29201
[ 1659.023073] Sensor A: =================  START STATUS  =================
[ 1659.032220] kobject: 'loop5' (00000000311ed32a): kobject_uevent_env
[ 1659.043002] Sensor A: Test Pattern: 75% Colorbar
[ 1659.052053] Sensor A: Vertical Flip: false
[ 1659.055282] kobject: 'loop5' (00000000311ed32a): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1659.065709] binder: 31349:31350 got transaction with invalid data ptr
[ 1659.078097] Sensor A: Horizontal Flip: false
[ 1659.081097] kobject: 'loop4' (00000000df9ebae6): kobject_uevent_env
[ 1659.087957] Sensor A: Brightness: 128
[ 1659.091502] kobject: 'loop4' (00000000df9ebae6): fill_kobj_path: path = '/devices/virtual/block/loop4'